last executing test programs: 12m21.633246921s ago: executing program 32 (id=171): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x6, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}}, 0x0) 11m33.852377432s ago: executing program 33 (id=331): getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) ptrace$peek(0x2, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x6a, &(0x7f0000000980)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "955aec9ef39911c4e608778212119fd3d90397a2d165de62", "580c5119fb37bf4a8be03c1f77f40bafce6ab79eb3b71dc477351f542ce9232f"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) acct(&(0x7f00000001c0)='./file0\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r5}, 0x10, &(0x7f00000004c0)={&(0x7f0000000580)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000018c0)={&(0x7f0000000040)={0x1, 0x1ae, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x85, 0x3, 0x0, 0x0, "3868efaafd720c4b"}}, 0x38}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) 10m30.459596212s ago: executing program 34 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x4}, 0x2f) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r4}}) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) 8m37.22894576s ago: executing program 35 (id=823): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83#\xcar\xc2\xb9x\xa4q\xc1\xea_\x8c\xa2\xbaH\x18\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2&#ZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x97\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xed\xb5\xb6c\xe0\x9e\x81j7UKE\xa8\xfd5\xee\xdd\xfa\xfe\x18[\\\xeaP\n\xf2\x92\x92{>y\x14\xdb\xbe\xc5\x85#\xee\xefdG\x19\xacYk\xfdy\xeby_\x1c\xbe\xb6d}\x16SB\xd24u+\x18\xcc\xa9n\xc0\\s\x9a\xac:S\xe7\xca\xe3\xca\xfb\xc0\xef\x86\x85~\xf3\x90\x1a\x92i?\xaad\x9f\x92\x9c\x86\xf3\xd2b7\xeb9\xedn\x0f\x14\x8dX\x93\xc1\xef', 0x3) ftruncate(r0, 0xffff) write$binfmt_elf64(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x8e8c0, 0x54) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x6}}], 0x30}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 8m35.812151983s ago: executing program 36 (id=828): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = open$dir(0x0, 0x6042, 0x80) openat(r2, 0x0, 0x303d01, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000040)={0x1900}) 7m32.527291925s ago: executing program 37 (id=996): socket(0xa, 0x3, 0x3a) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6m21.892004103s ago: executing program 38 (id=1173): r0 = fsopen(&(0x7f00000003c0)='nfsd\x00', 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6m5.996697806s ago: executing program 39 (id=1206): add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xe) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5m54.744624218s ago: executing program 6 (id=1270): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x200) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x95f, 0x800, "30f4d4ff9e745fbd94128d47e58638e91354d1bd0a2b0fbc", {0xe7, 0x100}, 0x1}) 5m54.522360938s ago: executing program 6 (id=1272): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d7", 0x20}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x10040, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB='\x00\x00']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0x20) msgrcv(r3, 0x0, 0x0, 0x0, 0x2000) msgrcv(r3, 0x0, 0x0, 0x2, 0x1000) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 5m52.86513504s ago: executing program 7 (id=1274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, 0x0) 5m52.719906842s ago: executing program 7 (id=1275): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000640)={[0x20000000]}, 0x8) name_to_handle_at(r2, &(0x7f0000004740)='\x00', &(0x7f0000004780)=@fuse={0xc}, 0x0, 0x1200) 5m50.29254324s ago: executing program 7 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) flock(r2, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 5m50.239704016s ago: executing program 6 (id=1280): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000020940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c00028008000340000000000800024000000004080001400000080f14000180090001006c61737400000000040002800900010073797a30000000000900020073797a32"], 0x98}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000240)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x28) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x178, 0x394, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0xa}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) listen(0xffffffffffffffff, 0x0) accept$ax25(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x1}], 0x1) 5m48.886751284s ago: executing program 7 (id=1282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0xe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) syz_io_uring_setup(0x7837, &(0x7f00000000c0)={0x0, 0xb754, 0x1, 0x2, 0x20}, &(0x7f0000000140), &(0x7f00000001c0)) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "5e4f698c"}]}}, 0x0}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008"], 0x2c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x0) 5m48.83721775s ago: executing program 6 (id=1283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, 0x0) 5m48.560949882s ago: executing program 6 (id=1285): socket$isdn(0x22, 0x2, 0x26) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x412c0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='bcache_alloc\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, 0x0, &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x18}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x3) 5m46.987627253s ago: executing program 6 (id=1288): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d7", 0x20}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x10040, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB='\x00\x00']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0x20) msgrcv(r3, 0x0, 0x0, 0x0, 0x2000) msgrcv(r3, 0x0, 0x0, 0x2, 0x1000) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 5m46.297219641s ago: executing program 7 (id=1289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$l2tp(0x2, 0x2, 0x73) socket$inet6(0xa, 0x805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003be0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000280)=""/4096, 0x1000, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140), 0x300) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 5m45.146468858s ago: executing program 7 (id=1290): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5m32.57846512s ago: executing program 8 (id=1303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000240)="259374c96ee3", 0x0, 0x4, 0x0, 0x0, 0x0}) 5m31.652093327s ago: executing program 40 (id=1288): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d7", 0x20}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x10040, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB='\x00\x00']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = msgget$private(0x0, 0x20) msgrcv(r3, 0x0, 0x0, 0x0, 0x2000) msgrcv(r3, 0x0, 0x0, 0x2, 0x1000) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 5m31.301180445s ago: executing program 8 (id=1306): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = memfd_create(0x0, 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r2, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0x0) personality(0x4000000) 5m29.978225014s ago: executing program 41 (id=1290): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5m29.835800339s ago: executing program 8 (id=1309): socket$isdn(0x22, 0x2, 0x26) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x412c0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='bcache_alloc\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, 0x0, &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x18}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x3) 5m27.933603323s ago: executing program 8 (id=1311): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5m26.906445202s ago: executing program 8 (id=1312): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) flock(r2, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 5m25.784052746s ago: executing program 8 (id=1316): r0 = socket$inet(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="74010000", @ANYRES16], 0x174}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac141400"], 0x30}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85ead19197f5bb494e52b92a095e84bfbf0b4dbb1d381df80a5aeb2593fc7e8c756d0a4ade7d6f0567e650b62b6d1ea2a47d603030d2dc1d8d8c5c87e9c489e09c654592c2e9fccbf0f15e46d8536c09a9f07ea1f12d3a17e1d94458bd8448011c6e13fb3c957d3b8499524f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) listen(r0, 0xffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, 0x0}, 0x2a7) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 5m10.722875558s ago: executing program 42 (id=1316): r0 = socket$inet(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="74010000", @ANYRES16], 0x174}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac141400"], 0x30}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85ead19197f5bb494e52b92a095e84bfbf0b4dbb1d381df80a5aeb2593fc7e8c756d0a4ade7d6f0567e650b62b6d1ea2a47d603030d2dc1d8d8c5c87e9c489e09c654592c2e9fccbf0f15e46d8536c09a9f07ea1f12d3a17e1d94458bd8448011c6e13fb3c957d3b8499524f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup2(0xffffffffffffffff, 0xffffffffffffffff) listen(r0, 0xffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}]}}}]}]}], {0x14}}, 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, 0x0}, 0x2a7) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 3m6.572170711s ago: executing program 3 (id=1608): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000540)={0x40, 0xa, 0x46, {0x46, 0x4, "61639c54552ce9daa76026209610aa4b68e2aac937b1b0d2363bdd25b6995bdfd51207b2908fceb485a8995d91efa214613600e553d70000000000000000000000000079"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) open(0x0, 0x64b40, 0x0) 3m0.97549599s ago: executing program 3 (id=1622): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x17, 0x20000038, r1) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000b00)=ANY=[], 0x0}, &(0x7f0000000a80)={0x44, 0x0, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xe5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x81, 0x1, "8b"}, 0x0, &(0x7f0000000880)={0x20, 0x83, 0x2, "b44b"}, &(0x7f00000008c0)={0x20, 0x84, 0x1, "1e"}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m57.538428329s ago: executing program 3 (id=1632): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e6ef, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=@generic={0x1, 0x0, 0x0, "46578827"}) 2m53.778051708s ago: executing program 3 (id=1644): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r1 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xa0c80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs(0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1001, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000840)={{0x400007b, 0x4, 0x4, 0x4, 'syz0\x00', 0x4}, 0x1, 0x30000024, 0x7b, r6, 0xfffffffffffffd8a, 0x4, 'syz1\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r7) r8 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f0000000280)='./file0\x00', 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x8000, 0x0, 0x0, 0xfffffffc}}) 2m51.600345615s ago: executing program 3 (id=1648): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0], 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000340)={&(0x7f00000009c0), 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f00000000c0)=[r8], &(0x7f0000000340)}) 2m50.418925442s ago: executing program 5 (id=1652): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x2) 2m49.289364721s ago: executing program 5 (id=1655): socket(0x21, 0x2, 0xe) socket$inet6(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x641, 0x4000000c, r2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0), 0x4) fanotify_mark(r1, 0x1, 0x8001023, r2, 0x0) utimensat(r2, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xa, @loopback}, 0x1c) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000340)=@usbdevfs_driver={0x4c, 0x4, 0x0}) 2m48.277634994s ago: executing program 5 (id=1658): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r1 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xa0c80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs(0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1001, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000840)={{0x400007b, 0x4, 0x4, 0x4, 'syz0\x00', 0x4}, 0x1, 0x30000024, 0x7b, r6, 0xfffffffffffffd8a, 0x4, 'syz1\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r7) r8 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) renameat2(r9, &(0x7f0000000200)='./bus\x00', r9, &(0x7f0000000280)='./file0\x00', 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, 0x8000, 0x0, 0x0, 0xfffffffc}}) 2m48.209947688s ago: executing program 3 (id=1659): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x6d, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) openat$cgroup_int(r0, &(0x7f0000000740)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) 2m46.455350103s ago: executing program 5 (id=1661): r0 = socket$isdn(0x22, 0x2, 0x26) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x412c0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='bcache_alloc\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, 0x0, &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x18}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x3) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x8c, 0x0, 0x1}, 0x6) 2m44.561762509s ago: executing program 5 (id=1665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000004100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000f30000000000000000000000000000000000cf06c97ce9eaccda4551a45f24ae0af3c99dcd7b91260e0684f8a7306facd3f151c169b3a3b8f1f7e69e"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40007fffffff) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r4, 0x4b000) 2m39.718396727s ago: executing program 5 (id=1673): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001540)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xf0) 2m30.982503757s ago: executing program 43 (id=1659): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x6d, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) openat$cgroup_int(r0, &(0x7f0000000740)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) 2m24.710288351s ago: executing program 44 (id=1673): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001540)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000040)=0xf0) 42.340585831s ago: executing program 2 (id=1892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r8, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r8, @ANYRESOCT=0x0, @ANYBLOB="dd8ba85ba69a455e60bf32d52c7e08bfd2eedf3cd8764bd55a5641c5cb434b143c6373e928889a720719f0045e4b5703a0b97b30d3234981cbeb111a569c7c810a", @ANYRESDEC=0x0, @ANYRES32=r1], 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) 38.687641034s ago: executing program 2 (id=1897): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x48, 0x0, 0xfa}, {0x6}]}, 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001a00010a00000000000000000a000200"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 37.450250485s ago: executing program 2 (id=1902): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000020940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c00028008000340000000000800024000000004080001400000080f14000180090001006c61737400000000040002800900010073797a30000000000900020073797a32"], 0x98}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x28) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x178, 0x394, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0xa}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) listen(r2, 0x0) accept$ax25(r2, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x1}], 0x1) 33.166538045s ago: executing program 9 (id=1910): socket$can_j1939(0x1d, 0x2, 0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x1000007, &(0x7f0000000040)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) semtimedop(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) 32.544694996s ago: executing program 2 (id=1913): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) clock_settime(0xe, 0x0) fcntl$setflags(r3, 0x2, 0x1) unshare(0x8000000) semget$private(0x0, 0x4001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0xfffffffe}, 0x3, 0x0, 0x42, 0x0, 0x0, 0xffffffff, 'syz0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) 32.380613075s ago: executing program 9 (id=1915): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 31.991713356s ago: executing program 9 (id=1917): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0], &(0x7f0000000040), 0x1, r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 30.86749355s ago: executing program 2 (id=1918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x2000, 0x88fb}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0xcd, 0x0, @wg=@data={0x4, 0x9, 0xf59, "85b8e6665d890582126b83824ec5eabb03a01fcf153a3646ecf39707b92f780837084c4cc8a19acf27b70180327f6abf78820fc7874ee8774d5b70f2e9f184db67007ec1be931e3dc74d973d2e9f6f23571bebe1d1b1fbb3efc0e8ebf0e49c43d86afabb8d481fc31ddcb37cce1c21feb3af6ee3d9b411a3bfc800465412292f36d5f103e723d7c1903dfb50f380ddba1d723abb6c5b5d8c0682b2bcbdeeac1003e2a1a7c61321e3e7d2b82c3b9492b8533f316f98"}}}}}}}, 0xf3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = userfaultfd(0x80001) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) timer_create(0x1, &(0x7f0000000080)={0x0, 0x12, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00008dc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000368000/0x4000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/64, 0x40}], 0x5) 30.820875725s ago: executing program 9 (id=1919): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffffc) keyctl$read(0xb, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 28.072998141s ago: executing program 9 (id=1923): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x10, &(0x7f0000000780), &(0x7f0000000080), 0x8, 0x3, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x8, 0x1000016, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x100, 0x0, 0x72}) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) connect$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x6, @rose, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 26.163853569s ago: executing program 9 (id=1924): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$cec(0x0, 0x0, 0x8240) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x5, 0x0) r2 = open(0x0, 0x0, 0x0) getdents(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$kcm(0x29, 0x0, 0x0) 25.977478945s ago: executing program 2 (id=1925): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000a00)={0xf9a0, 0x2, [{0x1, 0x1}, {0x9, 0x1}]}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) writev(r2, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d70726566c15e65723d737461923ba15c3365971a24e77469633a"]) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) write$uinput_user_dev(r3, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c8d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 11.230259403s ago: executing program 0 (id=1956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r3, 0x8926, 0x20001100) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="a1aaaaaaaaaa00380000f41eae5686c7537700000805000100"], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 11.086570674s ago: executing program 45 (id=1924): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$cec(0x0, 0x0, 0x8240) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x5, 0x0) r2 = open(0x0, 0x0, 0x0) getdents(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$kcm(0x29, 0x0, 0x0) 11.07934461s ago: executing program 4 (id=1958): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getgid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video(0x0, 0x2, 0xac400) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000040)={0x990001, 0x2}) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback, 0x46}, 0x1c) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x95d3, 0x0, 0x2}, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r5, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) 9.883183326s ago: executing program 46 (id=1925): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000a00)={0xf9a0, 0x2, [{0x1, 0x1}, {0x9, 0x1}]}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) writev(r2, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d70726566c15e65723d737461923ba15c3365971a24e77469633a"]) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) write$uinput_user_dev(r3, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c8d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 9.843603629s ago: executing program 4 (id=1960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) timer_settime(0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) fstat(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)={[{@usrquota}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x74, 0x6d, 0x35, 0x32, 0x6d]}}, {@grpquota_inode_hardlimit}, {@uid={'uid', 0x3d, r5}}, {@huge_advise}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@mpol={'mpol', 0x3d, {'bind', '', @void}}}], [{@appraise}]}) 9.63558947s ago: executing program 0 (id=1961): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() write$ppp(0xffffffffffffffff, &(0x7f0000000500)="e6f58b13ccf81f0fbf83483231b7e110d865f0d1d25d705d11117ca0799dc15cac7079505bf730a9cf409a75a73b6d25a5af0f19e5be185f8f5559e37d22e1128d9f65e73de3164cc3356162f75e8eb0a4efa051dcf9be5d556aad57e42d163c8718eb0bdd5612d5518fc1ef0cbfaa54ce85e15c6f032be89347a53adf9cedb392dec3e69781041c147f4371b64affee09ac227d5b00259917e9188065094557f82fb31b2a50dd69d6ed18ebd86b03df", 0xb0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) shutdown(r4, 0x2) 7.857678303s ago: executing program 0 (id=1963): bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_open_dev$usbfs(0x0, 0x1ff, 0xa601) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) sendmsg$802154_dgram(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000040)={0x0}}, 0x10) 7.821246149s ago: executing program 1 (id=1964): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x10, &(0x7f0000000780), &(0x7f0000000080), 0x8, 0x3, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x8, 0x1000016, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x100, 0x0, 0x72}) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) connect$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x6, @rose, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 6.785795254s ago: executing program 1 (id=1965): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x20000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000021c0)=0xe) ioctl$TCXONC(r0, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 6.553603314s ago: executing program 0 (id=1966): r0 = socket$isdn(0x22, 0x2, 0x26) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x412c0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, 0x0, &(0x7f0000000140)}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x18}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usbip_server_init(0x3) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x8c, 0x0, 0x1}, 0x6) 5.329217858s ago: executing program 1 (id=1967): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaa8aaaaaabb000c040000e00001000033eae23d0cb02cab7026a9e999995e80e4e33f1a791c4cae762389eda87a3fffb645bcfb9f100b6adf3906fa8ed8e3130d2ea8f0554a01f9a04e39b438edd458f4ad7f3e6329522d8521af0d6a7ae2f99a0cbeff86faaf2948e23ca5a064910f5237ad8490f4d1ddeaa07b8c790f5df6af1bdf4e28c98cc693cc04d78add63180e436250848bc930cd236434b507d91cccae6fd386f8c735fffa997aea98ac7ceb2a1dbe7d3ba77e524b344864a574de23e8eccfda4c908d48b557d5604396d65e969542d3f721ba62dac0b9cb02da8148acba4bd258e66242d9e342c66a7fbcb0ccca26d85a434f9f6ebc0af181d99f6f151e55fbd9751e"], &(0x7f00000000c0)={0x1, 0x1, [0x948, 0x9b7, 0x97, 0xc39]}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0xffffffffffffffc0, &(0x7f0000000180)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffecd) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000400)=@gcm_256={{0x304}, "ca7ee2b1848ae337", "4b5b154869939154798f82be7dcae38bcdcab75bc2d1dcb3b28921cb75aab36d", "899d6e3a", "90167d3ae79ca2c5"}, 0x38) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000b40), 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000040)='autofs\x00', 0x8200, 0x0) 5.154204714s ago: executing program 4 (id=1968): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getgid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video(0x0, 0x2, 0xac400) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000040)={0x990001, 0x2}) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback, 0x46}, 0x1c) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x95d3, 0x0, 0x2}, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r5, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) 4.475118124s ago: executing program 0 (id=1969): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xb, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getitimer(0x0, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x141800) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x11, @loopback, 0x4e20, 0x1, 'dh\x00', 0xa, 0x0, 0x4d}, 0x2c) 2.779535646s ago: executing program 4 (id=1970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r3, 0x8926, 0x20001100) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="a1aaaaaaaaaa00380000f41eae5686c7537700000805000100"], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)}, &(0x7f0000000400)=0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 1.89955623s ago: executing program 1 (id=1971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r8, @ANYRESOCT=0x0, @ANYBLOB="dd8ba85ba69a455e60bf32d52c7e08bfd2eedf3cd8764bd55a5641c5cb434b143c6373e928889a720719f0045e4b5703a0b97b30d3234981cbeb111a569c7c810a", @ANYRESDEC=0x0, @ANYRES32=r1], 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) fadvise64(r7, 0x18, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) 697.214483ms ago: executing program 1 (id=1972): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x5, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r3, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000200)=ANY=[]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r4, 0x0) 347.517901ms ago: executing program 4 (id=1973): syz_clone(0x29382000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 146.777337ms ago: executing program 1 (id=1974): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020a020874200000000000109022d00010000800009040000fe030000000921fdff000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "8355cbb8"}]}}, 0x0}, 0x0) 1.023787ms ago: executing program 0 (id=1975): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x400, 0x0) linkat(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file1\x00', 0x0) getdents(r2, 0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') 0s ago: executing program 4 (id=1976): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x20000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000021c0)=0xe) ioctl$TCXONC(r0, 0x540a, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) kernel console output (not intermixed with test programs): 03e syscall=53 compat=0 ip=0x7ff72c18066a code=0x7ffc0000 [ 616.687111][ T29] audit: type=1326 audit(1731884622.583:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12165 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff72c17d0b0 code=0x7ffc0000 [ 616.829003][T12165] delete_channel: no stack [ 616.860163][T12176] vhci_hcd: connection closed [ 616.877158][ T1131] bridge_slave_0: left promiscuous mode [ 616.973816][ T35] vhci_hcd: stop threads [ 617.031082][ T29] audit: type=1326 audit(1731884622.593:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12165 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff72c17d1ff code=0x7ffc0000 [ 617.079413][ T35] vhci_hcd: release socket [ 617.102025][ T25] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 617.115374][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.127002][ T35] vhci_hcd: disconnect device [ 617.133718][ T1131] bridge_slave_1: left allmulticast mode [ 617.150760][ T29] audit: type=1326 audit(1731884622.853:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12165 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff72c17d3aa code=0x7ffc0000 [ 617.155368][ T1131] bridge_slave_1: left promiscuous mode [ 617.204476][ T29] audit: type=1326 audit(1731884622.853:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12165 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 617.205470][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.235219][ T29] audit: type=1326 audit(1731884622.863:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12165 comm="syz.3.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 617.276936][ T1131] bridge_slave_0: left allmulticast mode [ 617.282635][ T1131] bridge_slave_0: left promiscuous mode [ 617.288476][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.247535][T12186] ubi0: attaching mtd0 [ 618.252348][T12186] ubi0: scanning is finished [ 618.489671][T12186] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 618.521798][T12186] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 618.544990][T12186] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 618.559028][T12186] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 618.605956][T12186] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 618.635279][T12186] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 618.643333][T12186] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3153407836 [ 618.712729][T12186] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 618.875783][T12190] ubi0: background thread "ubi_bgt0d" started, PID 12190 [ 619.358543][ T5832] vhci_hcd: vhci_device speed not set [ 619.596988][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.636244][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.673273][ T1131] bond0 (unregistering): Released all slaves [ 619.776503][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.817659][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.830876][T12198] 9pnet_fd: Insufficient options for proto=fd [ 619.840634][ T1131] bond0 (unregistering): Released all slaves [ 619.900491][T11906] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 620.014599][T11665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.035553][T11906] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 620.099516][T11906] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 620.206913][T11906] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 620.343576][ T1131] tipc: Disabling bearer [ 620.372460][ T1131] tipc: Left network mode [ 620.911648][T11906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.928260][T11906] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.948222][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.955413][ T6609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.896020][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.903292][ T6609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.221863][T11665] veth0_vlan: entered promiscuous mode [ 622.235686][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1397'. [ 622.276912][ T25] vhci_hcd: vhci_device speed not set [ 622.316744][T11665] veth1_vlan: entered promiscuous mode [ 622.584825][T11647] veth0_vlan: entered promiscuous mode [ 622.649618][T11665] veth0_macvtap: entered promiscuous mode [ 623.277593][T11647] veth1_vlan: entered promiscuous mode [ 623.296559][T11665] veth1_macvtap: entered promiscuous mode [ 623.426395][ T1131] hsr_slave_0: left promiscuous mode [ 623.432715][ T1131] hsr_slave_1: left promiscuous mode [ 623.440149][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.541229][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.555760][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.563232][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.578526][ T1131] hsr_slave_0: left promiscuous mode [ 623.584855][ T1131] hsr_slave_1: left promiscuous mode [ 623.591172][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.332637][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.359289][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.375263][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.433593][ T1131] veth1_macvtap: left promiscuous mode [ 624.445497][ T1131] veth0_macvtap: left promiscuous mode [ 624.451271][ T1131] veth1_vlan: left promiscuous mode [ 624.456987][ T1131] veth0_vlan: left promiscuous mode [ 624.473543][ T1131] veth1_macvtap: left promiscuous mode [ 624.479357][ T1131] veth0_macvtap: left promiscuous mode [ 624.485005][ T1131] veth1_vlan: left promiscuous mode [ 624.490657][ T1131] veth0_vlan: left promiscuous mode [ 624.590500][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.597116][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.185438][ T5941] IPVS: starting estimator thread 0... [ 628.275340][T12273] IPVS: using max 20 ests per chain, 48000 per kthread [ 628.296111][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 628.502910][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 628.687860][ T29] audit: type=1326 audit(1731884634.943:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12274 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 628.711870][ T29] audit: type=1326 audit(1731884634.943:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12274 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 628.901723][T12277] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 628.908309][T12277] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 628.916269][T12277] vhci_hcd vhci_hcd.0: Device attached [ 629.170880][T12274] delete_channel: no stack [ 629.176347][T12278] vhci_hcd: connection closed [ 629.183262][ T3526] vhci_hcd: stop threads [ 629.198268][ T3526] vhci_hcd: release socket [ 629.231569][ T3526] vhci_hcd: disconnect device [ 629.237234][ T5832] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 629.259232][ T29] audit: type=1326 audit(1731884634.943:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12274 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe63db8066a code=0x7ffc0000 [ 629.315229][ T29] audit: type=1326 audit(1731884634.943:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12274 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe63db7d0b0 code=0x7ffc0000 [ 629.336989][ T29] audit: type=1326 audit(1731884634.943:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12274 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe63db7d1ff code=0x7ffc0000 [ 629.358291][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.364694][ T29] audit: type=1326 audit(1731884635.183:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12274 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe63db7d3aa code=0x7ffc0000 [ 629.387109][ T29] audit: type=1326 audit(1731884635.193:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12274 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 629.408592][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.416944][ T29] audit: type=1326 audit(1731884635.193:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12274 comm="syz.4.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 629.435800][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 629.438440][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.449339][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 629.480663][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 629.491876][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 629.501133][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 629.508629][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 630.210852][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 630.221849][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 630.240518][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 630.259328][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 630.272857][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 630.286421][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 630.956420][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 631.035807][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 631.582389][ T5847] Bluetooth: hci2: command tx timeout [ 632.349366][ T5847] Bluetooth: hci3: command tx timeout [ 632.791321][T11906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.643624][ T5839] Bluetooth: hci2: command tx timeout [ 634.355398][ T5832] vhci_hcd: vhci_device speed not set [ 634.407373][T11906] veth0_vlan: entered promiscuous mode [ 634.425497][ T5839] Bluetooth: hci3: command tx timeout [ 634.540982][T11906] veth1_vlan: entered promiscuous mode [ 634.757169][T12327] openvswitch: netlink: Duplicate or invalid key (type 0). [ 634.764552][T12327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.168689][T12281] chnl_net:caif_netlink_parms(): no params data found [ 635.431274][T11906] veth0_macvtap: entered promiscuous mode [ 635.519851][T11906] veth1_macvtap: entered promiscuous mode [ 635.597888][T11906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.608590][T11906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.619721][T11906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.653244][T11906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.725738][ T5839] Bluetooth: hci2: command tx timeout [ 635.756972][T11906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.932940][T12286] chnl_net:caif_netlink_parms(): no params data found [ 636.023981][ T29] audit: type=1326 audit(1731884642.283:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 636.047135][ T29] audit: type=1326 audit(1731884642.283:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 636.068669][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.251406][T12333] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 636.258085][T12333] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 636.266293][T12333] vhci_hcd vhci_hcd.0: Device attached [ 636.376112][ T29] audit: type=1326 audit(1731884642.283:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff72c18066a code=0x7ffc0000 [ 636.522164][T12329] delete_channel: no stack [ 636.533338][ T5839] Bluetooth: hci3: command tx timeout [ 636.543739][T11572] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 636.568795][T12335] vhci_hcd: connection closed [ 636.595662][ T5948] vhci_hcd: stop threads [ 636.633802][ T5948] vhci_hcd: release socket [ 636.638830][ T29] audit: type=1326 audit(1731884642.283:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff72c17d0b0 code=0x7ffc0000 [ 636.665350][ T5948] vhci_hcd: disconnect device [ 636.683799][T11906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.703105][T11906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.713355][T11906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.713427][ T29] audit: type=1326 audit(1731884642.283:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff72c17d1ff code=0x7ffc0000 [ 636.724066][T11906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.794107][ T29] audit: type=1326 audit(1731884642.533:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff72c17d3aa code=0x7ffc0000 [ 636.846743][T11906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.864021][ T29] audit: type=1326 audit(1731884642.533:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 636.889753][T11906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.925162][T11906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.933918][T11906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.943369][ T29] audit: type=1326 audit(1731884642.533:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.3.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 636.975562][T11906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.611472][T12281] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.620858][T12281] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.628955][T12281] bridge_slave_0: entered allmulticast mode [ 637.636497][T12281] bridge_slave_0: entered promiscuous mode [ 637.684067][T12281] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.841014][T12281] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.855206][ T5839] Bluetooth: hci2: command tx timeout [ 637.941266][T12281] bridge_slave_1: entered allmulticast mode [ 638.058408][T12281] bridge_slave_1: entered promiscuous mode [ 638.549892][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.585605][ T5839] Bluetooth: hci3: command tx timeout [ 638.595586][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.696251][T12286] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.717485][T12286] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.724788][T12286] bridge_slave_0: entered allmulticast mode [ 638.744554][T12286] bridge_slave_0: entered promiscuous mode [ 638.836274][T12286] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.843421][T12286] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.977263][T12286] bridge_slave_1: entered allmulticast mode [ 639.000847][T12286] bridge_slave_1: entered promiscuous mode [ 639.105696][T12357] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1429' sets config #76 [ 639.107470][T12281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.543776][ T6176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.590890][ T6176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.604270][T12281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.722116][T12286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.749816][T12286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.781140][T12281] team0: Port device team_slave_0 added [ 639.856812][T12281] team0: Port device team_slave_1 added [ 640.106061][T12286] team0: Port device team_slave_0 added [ 640.117968][T12286] team0: Port device team_slave_1 added [ 640.129726][T12281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.150074][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.177153][T12281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.230229][T12286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.244249][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.284358][T12286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.301314][T12281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.314702][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.346090][T12281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.365306][T12286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.378963][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.417125][T12286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.737290][T12281] hsr_slave_0: entered promiscuous mode [ 640.765646][T12281] hsr_slave_1: entered promiscuous mode [ 640.957013][T12286] hsr_slave_0: entered promiscuous mode [ 640.970024][T12286] hsr_slave_1: entered promiscuous mode [ 641.011051][T12286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.039768][T12286] Cannot create hsr debugfs directory [ 641.150692][ T29] audit: type=1326 audit(1731884647.403:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12375 comm="syz.4.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 642.034465][T12375] delete_channel: no stack [ 642.039638][ T5847] Bluetooth: hci0: command 0x0405 tx timeout [ 642.290727][T12379] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 642.297333][T12379] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 642.305207][T12379] vhci_hcd vhci_hcd.0: Device attached [ 642.312950][T11572] vhci_hcd: vhci_device speed not set [ 642.318619][ T29] audit: type=1326 audit(1731884647.403:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12375 comm="syz.4.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 642.340743][ T29] audit: type=1326 audit(1731884647.403:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12375 comm="syz.4.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe63db8066a code=0x7ffc0000 [ 642.362600][ T29] audit: type=1326 audit(1731884647.403:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12375 comm="syz.4.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe63db7d0b0 code=0x7ffc0000 [ 642.384707][ T29] audit: type=1326 audit(1731884647.413:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12375 comm="syz.4.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe63db7d1ff code=0x7ffc0000 [ 642.406673][ T29] audit: type=1326 audit(1731884648.573:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12375 comm="syz.4.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe63db7d3aa code=0x7ffc0000 [ 642.428544][ T29] audit: type=1326 audit(1731884648.573:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12375 comm="syz.4.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 642.450655][ T29] audit: type=1326 audit(1731884648.573:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12375 comm="syz.4.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 642.527441][T12381] vhci_hcd: connection closed [ 642.536272][ T76] vhci_hcd: stop threads [ 642.545391][ T76] vhci_hcd: release socket [ 642.549872][ T76] vhci_hcd: disconnect device [ 643.785917][T12393] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1438' sets config #76 [ 644.731147][T12410] overlayfs: failed to resolve './file1': -2 [ 644.980210][ T29] audit: type=1326 audit(1731884651.233:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12404 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 645.515874][T12404] delete_channel: no stack [ 645.720803][T12412] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 645.727381][T12412] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 645.735342][T12412] vhci_hcd vhci_hcd.0: Device attached [ 645.743828][T12414] vhci_hcd: connection closed [ 645.758354][ T6582] vhci_hcd: stop threads [ 645.770037][ T29] audit: type=1326 audit(1731884651.233:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12404 comm="syz.3.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 645.807725][ T6582] vhci_hcd: release socket [ 645.827533][ T6582] vhci_hcd: disconnect device [ 647.210658][T12422] pim6reg: entered allmulticast mode [ 648.107442][T12424] delete_channel: no stack [ 648.504196][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 648.504269][ T29] audit: type=1326 audit(1731884653.993:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12424 comm="syz.0.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 648.852950][T12409] pim6reg: left allmulticast mode [ 648.859929][ T29] audit: type=1326 audit(1731884653.993:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12424 comm="syz.0.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 648.881732][ T29] audit: type=1326 audit(1731884653.993:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12424 comm="syz.0.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3882b8066a code=0x7ffc0000 [ 648.903456][ T29] audit: type=1326 audit(1731884653.993:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12424 comm="syz.0.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3882b7d0b0 code=0x7ffc0000 [ 648.925850][ T29] audit: type=1326 audit(1731884654.003:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12424 comm="syz.0.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3882b7d1ff code=0x7ffc0000 [ 649.021521][ T1131] bridge_slave_1: left allmulticast mode [ 649.029290][ T1131] bridge_slave_1: left promiscuous mode [ 649.078567][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.319403][ T1131] bridge_slave_0: left allmulticast mode [ 649.325723][ T1131] bridge_slave_0: left promiscuous mode [ 649.331456][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.398014][ T1131] bridge_slave_1: left allmulticast mode [ 649.403729][ T1131] bridge_slave_1: left promiscuous mode [ 649.452770][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.514482][ T1131] bridge_slave_0: left allmulticast mode [ 649.568611][ T1131] bridge_slave_0: left promiscuous mode [ 649.610732][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.272699][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.286510][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.299440][ T1131] bond0 (unregistering): Released all slaves [ 652.338521][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.358103][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.370937][ T1131] bond0 (unregistering): Released all slaves [ 652.896573][ T29] audit: type=1326 audit(1731884659.023:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 652.950421][T12472] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 652.957010][T12472] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 652.965738][T12472] vhci_hcd vhci_hcd.0: Device attached [ 653.262933][T12469] delete_channel: no stack [ 653.268342][T12473] vhci_hcd: connection closed [ 653.269542][T11551] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 653.296450][ T5948] vhci_hcd: stop threads [ 653.300854][ T5948] vhci_hcd: release socket [ 653.309783][ T29] audit: type=1326 audit(1731884659.023:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 653.335133][ T5948] vhci_hcd: disconnect device [ 653.340672][ T1131] hsr_slave_0: left promiscuous mode [ 653.375690][ T1131] hsr_slave_1: left promiscuous mode [ 653.381788][ T29] audit: type=1326 audit(1731884659.023:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3882b8066a code=0x7ffc0000 [ 653.422651][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.432095][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.439896][ T29] audit: type=1326 audit(1731884659.023:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3882b7d0b0 code=0x7ffc0000 [ 653.439948][ T29] audit: type=1326 audit(1731884659.023:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12469 comm="syz.0.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3882b7d1ff code=0x7ffc0000 [ 653.577337][ T1131] hsr_slave_0: left promiscuous mode [ 653.601488][ T1131] hsr_slave_1: left promiscuous mode [ 653.608110][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.636758][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.724162][ T1131] veth1_vlan: left promiscuous mode [ 653.749492][ T1131] veth0_vlan: left promiscuous mode [ 653.770499][ T1131] veth1_macvtap: left promiscuous mode [ 653.779525][ T1131] veth0_macvtap: left promiscuous mode [ 653.805376][ T1131] veth1_vlan: left promiscuous mode [ 653.822552][ T1131] veth0_vlan: left promiscuous mode [ 654.858530][T12491] delete_channel: no stack [ 655.035821][T12496] xt_hashlimit: max too large, truncated to 1048576 [ 655.058728][T12497] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 655.065319][T12497] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 655.074626][T12497] vhci_hcd vhci_hcd.0: Device attached [ 655.084882][T12499] vhci_hcd: connection closed [ 655.103409][ T35] vhci_hcd: stop threads [ 655.120289][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 655.120351][ T29] audit: type=1326 audit(1731884660.583:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12491 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 655.158144][ T35] vhci_hcd: release socket [ 655.226196][ T29] audit: type=1326 audit(1731884660.583:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12491 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 655.232993][ T35] vhci_hcd: disconnect device [ 655.518573][ T29] audit: type=1326 audit(1731884660.583:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12491 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3882b8066a code=0x7ffc0000 [ 655.765160][ T29] audit: type=1326 audit(1731884660.583:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12491 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3882b7d0b0 code=0x7ffc0000 [ 655.862240][ T29] audit: type=1326 audit(1731884660.593:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12491 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3882b7d1ff code=0x7ffc0000 [ 655.906499][ T29] audit: type=1326 audit(1731884661.353:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12491 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3882b7d3aa code=0x7ffc0000 [ 655.937083][ T29] audit: type=1326 audit(1731884661.353:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12491 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 655.969300][ T29] audit: type=1326 audit(1731884661.353:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12491 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 656.728912][T12526] program syz.3.1462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.339787][T12528] Invalid option length (23101) for dns_resolver key [ 657.477689][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 657.966592][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 658.106062][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 658.425638][T11551] vhci_hcd: vhci_device speed not set [ 659.178783][ T29] audit: type=1326 audit(1731884665.433:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12550 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 659.214658][ C0] vkms_vblank_simulate: vblank timer overrun [ 659.292820][T12553] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 659.299436][T12553] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 659.307476][T12553] vhci_hcd vhci_hcd.0: Device attached [ 659.635554][T11551] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 659.694754][T12550] delete_channel: no stack [ 659.700213][T12555] vhci_hcd: connection closed [ 659.714336][ T6176] vhci_hcd: stop threads [ 659.734445][ T29] audit: type=1326 audit(1731884665.433:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12550 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 659.775420][ T6176] vhci_hcd: release socket [ 659.780155][ T6176] vhci_hcd: disconnect device [ 660.962105][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 661.023465][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 662.786751][T12286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 663.041987][T12286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 663.087963][T12286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 663.144431][T12286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 663.690022][T12286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.435330][T12286] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.475839][T12286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 664.486838][T12286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 664.506622][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.513798][ T6176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.522998][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.530193][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.867230][T12281] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 664.895524][T11551] vhci_hcd: vhci_device speed not set [ 664.915582][T12281] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 664.938734][T12281] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 664.973712][T12281] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 665.148901][T12286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.000251][T12286] veth0_vlan: entered promiscuous mode [ 666.072002][T12281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.088922][T12281] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.110299][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.117647][ T6176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.128232][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.135430][ T6176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.159139][T12286] veth1_vlan: entered promiscuous mode [ 666.194690][T12286] veth0_macvtap: entered promiscuous mode [ 666.203902][T12286] veth1_macvtap: entered promiscuous mode [ 666.220638][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.231282][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.241446][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.252435][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.262646][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.273417][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.286240][T12286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.356551][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.368451][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.378392][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.388911][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.398812][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.409474][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.421109][T12286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.432567][T12286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.441461][T12286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.445206][T11561] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 666.450577][T12286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.466862][T12286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.708126][T11561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.744190][T11561] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 666.785313][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.796540][T11561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.814932][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.859822][T11561] usb 4-1: config 0 descriptor?? [ 666.945001][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.989492][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.103744][T12281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.330716][T11561] magicmouse 0003:05AC:0265.0011: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 667.937945][T11561] usb 4-1: USB disconnect, device number 12 [ 668.876846][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 668.876905][ T29] audit: type=1326 audit(1731884675.053:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 668.955812][T12707] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 668.962369][T12707] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 668.970183][T12707] vhci_hcd vhci_hcd.0: Device attached [ 669.046257][ T29] audit: type=1326 audit(1731884675.053:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 669.116804][T12711] tipc: Started in network mode [ 669.122968][T12711] tipc: Node identity ac1414aa, cluster identity 4711 [ 669.160641][T12711] tipc: Enabled bearer , priority 10 [ 669.166624][ T29] audit: type=1326 audit(1731884675.053:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff72c18066a code=0x7ffc0000 [ 669.324946][T12704] delete_channel: no stack [ 669.337019][ T29] audit: type=1326 audit(1731884675.053:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff72c17d0b0 code=0x7ffc0000 [ 669.358993][ T29] audit: type=1326 audit(1731884675.053:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff72c17d1ff code=0x7ffc0000 [ 669.380708][ T29] audit: type=1326 audit(1731884675.243:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff72c17d3aa code=0x7ffc0000 [ 669.403232][ T29] audit: type=1326 audit(1731884675.243:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 669.409579][T12281] veth0_vlan: entered promiscuous mode [ 669.425824][ T29] audit: type=1326 audit(1731884675.243:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12704 comm="syz.3.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 669.439475][T12281] veth1_vlan: entered promiscuous mode [ 669.453409][ T3571] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 669.467324][T12710] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 669.510347][T12708] vhci_hcd: connection closed [ 669.530399][ T52] vhci_hcd: stop threads [ 669.535671][T12281] veth0_macvtap: entered promiscuous mode [ 669.540499][ T52] vhci_hcd: release socket [ 669.549311][T12281] veth1_macvtap: entered promiscuous mode [ 669.602173][ T52] vhci_hcd: disconnect device [ 669.798050][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.808626][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.818694][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.829879][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.840570][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.851151][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.955502][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.011890][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.065890][T12281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.239879][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.250618][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.260697][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.272460][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.282765][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.293006][T11551] tipc: Node number set to 2886997162 [ 670.293508][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.308542][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.319407][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.336270][T12281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.440642][T12281] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.449806][T12281] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.458876][T12281] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.467891][T12281] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.116405][T12722] 9pnet_virtio: no channels available for device [ 671.337522][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.363997][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.375196][ T6582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.383122][ T6582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.965345][ T29] audit: type=1326 audit(1731884680.223:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 674.012432][T12752] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 674.019090][T12752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 674.027915][T12752] vhci_hcd vhci_hcd.0: Device attached [ 674.155888][ T29] audit: type=1326 audit(1731884680.223:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 674.177487][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.183967][ T29] audit: type=1326 audit(1731884680.223:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff72c18066a code=0x7ffc0000 [ 674.206994][ T29] audit: type=1326 audit(1731884680.223:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff72c17d0b0 code=0x7ffc0000 [ 674.228594][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.236532][ T29] audit: type=1326 audit(1731884680.223:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff72c17d1ff code=0x7ffc0000 [ 674.259026][ T29] audit: type=1326 audit(1731884680.293:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff72c17d3aa code=0x7ffc0000 [ 674.280416][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.287858][ T29] audit: type=1326 audit(1731884680.293:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 674.309893][ T29] audit: type=1326 audit(1731884680.293:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12748 comm="syz.3.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72c17e719 code=0x7ffc0000 [ 674.331665][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.356946][T12767] netlink: 176460 bytes leftover after parsing attributes in process `syz.1.1501'. [ 674.381717][T12767] netlink: zone id is out of range [ 674.387012][T12767] netlink: zone id is out of range [ 674.392850][T12767] netlink: zone id is out of range [ 674.398208][T12767] netlink: zone id is out of range [ 674.403493][T12767] netlink: zone id is out of range [ 674.408883][T12767] netlink: zone id is out of range [ 674.414193][T12767] netlink: zone id is out of range [ 674.419510][T12767] netlink: zone id is out of range [ 674.424795][T12767] netlink: zone id is out of range [ 674.430163][T12767] netlink: zone id is out of range [ 674.430707][T12748] delete_channel: no stack [ 674.570105][T12755] vhci_hcd: connection closed [ 674.575352][ T6176] vhci_hcd: stop threads [ 674.584519][ T6176] vhci_hcd: release socket [ 674.597313][ T6176] vhci_hcd: disconnect device [ 675.572017][ T3571] vhci_hcd: vhci_device speed not set [ 676.244297][T12781] netlink: 'syz.5.1505': attribute type 1 has an invalid length. [ 676.281704][T12784] 9pnet_virtio: no channels available for device [ 676.307881][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1505'. [ 678.742545][ T29] audit: type=1326 audit(1731884685.003:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12827 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 678.764211][ C0] vkms_vblank_simulate: vblank timer overrun [ 678.775403][T12831] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 678.781977][T12831] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 678.789767][T12831] vhci_hcd vhci_hcd.0: Device attached [ 678.789767][ T29] audit: type=1326 audit(1731884685.003:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12827 comm="syz.4.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 678.979505][T12842] 9pnet_virtio: no channels available for device [ 679.055611][ T25] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 679.242269][T12827] delete_channel: no stack [ 679.248220][T12832] vhci_hcd: connection reset by peer [ 679.255571][ T3526] vhci_hcd: stop threads [ 679.260387][ T3526] vhci_hcd: release socket [ 679.265669][ T3526] vhci_hcd: disconnect device [ 682.783513][T12870] tty tty23: ldisc open failed (-12), clearing slot 22 [ 685.170357][T12895] 9pnet_virtio: no channels available for device [ 685.185148][ T25] vhci_hcd: vhci_device speed not set [ 685.387398][T12899] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1529'. [ 686.096249][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.114034][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.868326][T12943] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1544'. [ 689.440747][T12947] 9pnet_virtio: no channels available for device [ 689.470813][T12949] xt_hashlimit: max too large, truncated to 1048576 [ 691.019475][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 691.019494][ T29] audit: type=1326 audit(1731884697.283:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 691.048230][T12980] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 691.054755][T12980] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 691.062458][T12980] vhci_hcd vhci_hcd.0: Device attached [ 691.166242][ T29] audit: type=1326 audit(1731884697.283:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 691.256753][ T29] audit: type=1326 audit(1731884697.283:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7102f8066a code=0x7ffc0000 [ 691.315224][T11551] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 691.346059][ T29] audit: type=1326 audit(1731884697.283:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7102f7d0b0 code=0x7ffc0000 [ 691.379495][ T29] audit: type=1326 audit(1731884697.283:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7102f7d1ff code=0x7ffc0000 [ 691.413816][ T29] audit: type=1326 audit(1731884697.333:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7102f7d3aa code=0x7ffc0000 [ 691.438825][ T29] audit: type=1326 audit(1731884697.333:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 691.468624][T12972] delete_channel: no stack [ 691.469353][T12981] vhci_hcd: connection reset by peer [ 691.493372][T12991] random: crng reseeded on system resumption [ 691.509378][ T6609] vhci_hcd: stop threads [ 691.543088][ T6609] vhci_hcd: release socket [ 691.547701][ T29] audit: type=1326 audit(1731884697.333:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12972 comm="syz.5.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 691.616758][ T6609] vhci_hcd: disconnect device [ 692.774483][ T29] audit: type=1326 audit(1731884699.013:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13006 comm="syz.5.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 692.802774][T13008] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 692.809336][T13008] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 692.817147][T13008] vhci_hcd vhci_hcd.0: Device attached [ 692.895457][ T29] audit: type=1326 audit(1731884699.013:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13006 comm="syz.5.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 693.148848][T13017] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1557'. [ 693.247580][T13006] delete_channel: no stack [ 693.258086][T13010] vhci_hcd: connection closed [ 693.298315][ T3437] vhci_hcd: stop threads [ 693.307703][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 693.320715][ T3437] vhci_hcd: release socket [ 693.327213][ T3437] vhci_hcd: disconnect device [ 693.515617][ T25] usb 5-1: device descriptor read/64, error -71 [ 693.915277][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 694.075602][ T25] usb 5-1: device descriptor read/64, error -71 [ 694.205805][ T25] usb usb5-port1: attempt power cycle [ 694.286162][ T5883] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 694.513310][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 695.345603][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 695.353868][ T5883] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 695.362117][ T5883] usb 6-1: config 0 has no interface number 0 [ 695.450076][ T5883] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 695.610488][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.619043][ T5883] usb 6-1: Product: syz [ 695.623340][ T5883] usb 6-1: Manufacturer: syz [ 695.629788][ T5883] usb 6-1: SerialNumber: syz [ 695.666366][ T5883] usb 6-1: config 0 descriptor?? [ 695.678309][T13071] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 695.684877][T13071] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 695.692756][T13071] vhci_hcd vhci_hcd.0: Device attached [ 695.735258][ T5883] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 695.781990][ T25] usb 5-1: device descriptor read/8, error -71 [ 696.904755][T13066] delete_channel: no stack [ 696.965200][T13075] vhci_hcd: connection closed [ 697.005180][T11561] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 697.022794][T13076] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 697.028242][ T5883] gspca_topro: reg_w err -110 [ 697.038798][ T6609] vhci_hcd: stop threads [ 697.043102][ T6609] vhci_hcd: release socket [ 697.055181][ T5883] gspca_topro: Sensor soi763a [ 697.083992][ T6609] vhci_hcd: disconnect device [ 697.088888][T11551] vhci_hcd: vhci_device speed not set [ 697.824873][ T5941] usb 6-1: USB disconnect, device number 13 [ 698.359637][T13099] bio_check_eod: 2 callbacks suppressed [ 698.359660][T13099] syz.4.1570: attempt to access beyond end of device [ 698.359660][T13099] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 698.397537][T13099] syz.4.1570: attempt to access beyond end of device [ 698.397537][T13099] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 698.411790][T13099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 698.424898][T13099] syz.4.1570: attempt to access beyond end of device [ 698.424898][T13099] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 698.438943][T13099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 698.459403][T13099] syz.4.1570: attempt to access beyond end of device [ 698.459403][T13099] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 698.475211][T13099] syz.4.1570: attempt to access beyond end of device [ 698.475211][T13099] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 698.489140][T13099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 698.504773][T13099] syz.4.1570: attempt to access beyond end of device [ 698.504773][T13099] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 698.519358][T13099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 698.535923][T13099] syz.4.1570: attempt to access beyond end of device [ 698.535923][T13099] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 698.550949][T13099] syz.4.1570: attempt to access beyond end of device [ 698.550949][T13099] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 698.564775][T13099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 698.575761][T13099] syz.4.1570: attempt to access beyond end of device [ 698.575761][T13099] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 698.589302][T13099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 698.609699][T13099] syz.4.1570: attempt to access beyond end of device [ 698.609699][T13099] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 698.625298][T13099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 698.637149][T13099] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 698.647002][T13099] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 699.646443][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 699.646466][ T29] audit: type=1326 audit(1731884705.903:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13104 comm="syz.5.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 699.706180][ T29] audit: type=1326 audit(1731884705.903:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13104 comm="syz.5.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 699.720587][T11572] IPVS: starting estimator thread 0... [ 699.728190][ T29] audit: type=1326 audit(1731884705.903:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13104 comm="syz.5.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7102f8066a code=0x7ffc0000 [ 699.728237][ T29] audit: type=1326 audit(1731884705.903:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13104 comm="syz.5.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7102f7d0b0 code=0x7ffc0000 [ 699.728277][ T29] audit: type=1326 audit(1731884705.903:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13104 comm="syz.5.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7102f7d1ff code=0x7ffc0000 [ 699.805557][T13107] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 699.812142][T13107] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 699.819872][T13107] vhci_hcd vhci_hcd.0: Device attached [ 699.826618][ T29] audit: type=1326 audit(1731884706.093:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13104 comm="syz.5.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7102f7d3aa code=0x7ffc0000 [ 699.900666][ T29] audit: type=1326 audit(1731884706.093:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13104 comm="syz.5.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 700.064618][T13108] IPVS: using max 16 ests per chain, 38400 per kthread [ 700.086944][ T29] audit: type=1326 audit(1731884706.093:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13104 comm="syz.5.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 700.237753][T13109] vhci_hcd: connection closed [ 700.237855][T13104] delete_channel: no stack [ 701.087621][T11551] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 701.095396][T13113] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 701.118909][ T6582] vhci_hcd: stop threads [ 701.128615][ T6582] vhci_hcd: release socket [ 701.266349][ T6582] vhci_hcd: disconnect device [ 702.979959][T11561] vhci_hcd: vhci_device speed not set [ 704.895247][ T29] audit: type=1326 audit(1731884711.123:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 704.917819][T13173] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 704.924341][T13173] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 704.932112][T13173] vhci_hcd vhci_hcd.0: Device attached [ 705.387497][ T46] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 705.390842][ T29] audit: type=1326 audit(1731884711.123:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 705.476163][T13170] delete_channel: no stack [ 705.572308][ T29] audit: type=1326 audit(1731884711.123:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe63db8066a code=0x7ffc0000 [ 705.594182][ T29] audit: type=1326 audit(1731884711.123:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe63db7d0b0 code=0x7ffc0000 [ 705.616239][ T29] audit: type=1326 audit(1731884711.123:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe63db7d1ff code=0x7ffc0000 [ 705.637938][ T29] audit: type=1326 audit(1731884711.203:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe63db7d3aa code=0x7ffc0000 [ 705.659505][ T29] audit: type=1326 audit(1731884711.203:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 705.675154][T13174] vhci_hcd: connection closed [ 705.681754][ T29] audit: type=1326 audit(1731884711.203:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.4.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 705.720179][ T6582] vhci_hcd: stop threads [ 705.724494][ T6582] vhci_hcd: release socket [ 705.765560][ T6582] vhci_hcd: disconnect device [ 706.424742][T11551] vhci_hcd: vhci_device speed not set [ 708.151055][T13217] netlink: 'syz.4.1596': attribute type 9 has an invalid length. [ 708.159593][T13217] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1596'. [ 709.383622][T13229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1599'. [ 711.125676][ T46] vhci_hcd: vhci_device speed not set [ 711.170128][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 711.678648][T13261] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1605' sets config #76 [ 713.331727][ T46] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 714.295420][T13288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1612'. [ 714.885221][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 714.893749][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.945875][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 714.984984][ T46] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 715.014861][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.125277][ T46] usb 4-1: config 0 descriptor?? [ 716.211332][T13304] random: crng reseeded on system resumption [ 716.270338][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'. [ 716.288006][ T46] ortek 0003:1223:3F07.0012: unknown main item tag 0x6 [ 716.296473][ T46] ortek 0003:1223:3F07.0012: unknown main item tag 0x1 [ 716.303385][ T46] ortek 0003:1223:3F07.0012: unknown main item tag 0xe [ 716.325162][ T46] ortek 0003:1223:3F07.0012: bogus close delimiter [ 716.331726][ T46] ortek 0003:1223:3F07.0012: item 0 0 2 10 parsing failed [ 716.339755][ T46] ortek 0003:1223:3F07.0012: probe with driver ortek failed with error -22 [ 716.484090][ T46] usb 4-1: USB disconnect, device number 13 [ 718.653964][T13304] Restarting kernel threads ... done. [ 718.888880][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 718.916057][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 718.935598][ T46] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 719.195453][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 719.203025][ T46] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 719.213320][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.242852][ T46] usb 4-1: config 0 descriptor?? [ 719.448138][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'. [ 719.495665][ T46] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 719.495697][T11551] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 719.655234][T11551] usb 5-1: Using ep0 maxpacket: 16 [ 719.672204][T11551] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 719.703462][T11551] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 719.724196][T13364] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1629'. [ 719.737825][T11551] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 719.747816][T11551] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.776708][T11551] usb 5-1: Product: syz [ 719.785618][T11551] usb 5-1: Manufacturer: syz [ 719.791311][T11551] usb 5-1: SerialNumber: syz [ 719.819278][T11551] usb 5-1: config 0 descriptor?? [ 719.841933][T11551] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 719.879382][T11551] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 720.100646][T11561] IPVS: starting estimator thread 0... [ 720.275706][T13372] IPVS: using max 15 ests per chain, 36000 per kthread [ 720.662531][T11551] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 720.706599][T11551] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 720.975400][ T46] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 721.001347][ T46] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 721.074683][ T46] asix 4-1:0.0: probe with driver asix failed with error -71 [ 721.118929][ T46] usb 4-1: USB disconnect, device number 14 [ 721.529971][T11551] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 722.086440][T13387] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 722.092538][T13387] ALSA: mixer_oss: invalid OSS volume 'ԩ6~f`{XSԒj?)]0\' [ 722.152655][T13387] ALSA: mixer_oss: invalid OSS volume ']qM3T=\S12$*' [ 722.157084][T11551] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 722.190721][T13387] ALSA: mixer_oss: invalid OSS volume ' ;*7 c+PqgU' [ 722.191487][T11551] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 722.214712][T13387] ALSA: mixer_oss: invalid OSS volume 'hv9gO= RpрH[t77' [ 722.216013][T11551] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 722.240368][T11551] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 722.260601][T11551] usb 5-1: USB disconnect, device number 18 [ 722.335395][ T5883] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 722.620802][ T5883] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 722.671125][ T5883] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 722.705317][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.744573][ T5883] usb 4-1: Product: syz [ 722.785277][ T5883] usb 4-1: Manufacturer: syz [ 722.789950][ T5883] usb 4-1: SerialNumber: syz [ 722.817223][ T46] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 723.625560][ T5883] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 723.781585][T11572] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 723.826655][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1639'. [ 723.894345][ T46] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 723.905645][ T46] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 723.915608][ T46] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 723.925257][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.767891][T13394] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 724.805648][T11551] usb 4-1: USB disconnect, device number 15 [ 724.887088][ T46] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 724.907503][T11572] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 725.162093][T11572] ath9k_htc: Failed to initialize the device [ 725.610776][ T3571] usb 6-1: USB disconnect, device number 14 [ 725.625411][T11551] usb 4-1: ath9k_htc: USB layer deinitialized [ 727.174712][ T29] audit: type=1326 audit(1731884733.203:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 727.218948][T13449] delete_channel: no stack [ 727.234981][ T29] audit: type=1326 audit(1731884733.203:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 727.655352][ T29] audit: type=1326 audit(1731884733.203:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe63db8066a code=0x7ffc0000 [ 727.700419][ T29] audit: type=1326 audit(1731884733.203:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe63db7d0b0 code=0x7ffc0000 [ 727.722485][ T29] audit: type=1326 audit(1731884733.213:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe63db7d1ff code=0x7ffc0000 [ 727.820620][T13453] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 727.827196][T13453] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 727.835089][T13453] vhci_hcd vhci_hcd.0: Device attached [ 727.840834][ T29] audit: type=1326 audit(1731884734.103:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe63db7d3aa code=0x7ffc0000 [ 727.885823][T13455] vhci_hcd: connection closed [ 727.902082][ T29] audit: type=1326 audit(1731884734.103:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 727.954834][ T29] audit: type=1326 audit(1731884734.103:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13449 comm="syz.4.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 727.985401][ T1097] vhci_hcd: stop threads [ 727.990240][ T1097] vhci_hcd: release socket [ 727.995825][ T1097] vhci_hcd: disconnect device [ 728.194555][T11561] vhci_hcd: vhci_device speed not set [ 729.079163][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 729.125112][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1651'. [ 730.499918][T13504] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1655' sets config #76 [ 731.399362][ T3571] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 731.939451][T13524] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 732.001855][ T3571] usb 5-1: too many configurations: 239, using maximum allowed: 8 [ 732.782804][ T3571] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 732.815828][ T3571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.865176][ T3571] usb 5-1: Product: syz [ 732.869424][ T3571] usb 5-1: Manufacturer: syz [ 732.874061][ T3571] usb 5-1: SerialNumber: syz [ 733.162139][ T3571] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 733.253802][ T5911] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 734.189817][ T29] audit: type=1326 audit(1731884740.363:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13535 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 734.238086][ T29] audit: type=1326 audit(1731884740.363:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13535 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 734.268328][T13535] delete_channel: no stack [ 734.274066][ T29] audit: type=1326 audit(1731884740.363:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13535 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7102f8066a code=0x7ffc0000 [ 734.305179][ T29] audit: type=1326 audit(1731884740.363:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13535 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7102f7d0b0 code=0x7ffc0000 [ 734.353546][ T29] audit: type=1326 audit(1731884740.363:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13535 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7102f7d1ff code=0x7ffc0000 [ 734.455192][T13540] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 734.461760][T13540] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 734.475783][T13540] vhci_hcd vhci_hcd.0: Device attached [ 734.491387][ T29] audit: type=1326 audit(1731884740.753:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13535 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7102f7d3aa code=0x7ffc0000 [ 734.543936][ T5839] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 734.575395][T13542] vhci_hcd: connection closed [ 734.592357][ T1097] vhci_hcd: stop threads [ 734.607457][ T1097] vhci_hcd: release socket [ 734.625657][ T1097] vhci_hcd: disconnect device [ 734.977509][ T29] audit: type=1326 audit(1731884740.753:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13535 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 735.167861][ T29] audit: type=1326 audit(1731884740.753:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13535 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7102f7e719 code=0x7ffc0000 [ 737.747747][T13575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 748.156032][ T5911] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 748.163053][ T5911] ath9k_htc: Failed to initialize the device [ 748.190969][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.223305][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.669097][T13614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1677'. [ 749.886022][ T3571] usb 5-1: USB disconnect, device number 19 [ 749.925223][ T3571] usb 5-1: ath9k_htc: USB layer deinitialized [ 753.766120][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 754.202842][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 754.228616][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 754.336252][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 754.357347][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 754.404799][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 754.817541][ T1131] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.295282][T11561] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 755.387306][T13641] Bluetooth: hci2: command 0x0406 tx timeout [ 755.393449][T13641] Bluetooth: hci3: command 0x0406 tx timeout [ 755.475529][T11561] usb 2-1: Using ep0 maxpacket: 16 [ 755.484009][T11561] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 755.493352][T11561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.501540][T11561] usb 2-1: Product: syz [ 755.505894][T11561] usb 2-1: Manufacturer: syz [ 755.510603][T11561] usb 2-1: SerialNumber: syz [ 755.532880][T11561] r8152-cfgselector 2-1: Unknown version 0x0000 [ 755.540080][T11561] r8152-cfgselector 2-1: config 0 descriptor?? [ 755.604158][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 755.615301][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 755.653947][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 755.671889][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 755.679841][ T5839] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 755.689489][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 755.761118][T13663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1688'. [ 755.884964][ T1131] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.167442][ T1131] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.407261][ T1131] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.478716][T11561] r8152-cfgselector 2-1: USB disconnect, device number 22 [ 756.665350][T13641] Bluetooth: hci0: command tx timeout [ 757.803047][ T5839] Bluetooth: hci5: command tx timeout [ 757.915429][ T1131] bridge_slave_1: left allmulticast mode [ 757.921243][ T1131] bridge_slave_1: left promiscuous mode [ 757.945690][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.017864][ T1131] bridge_slave_0: left allmulticast mode [ 758.036765][ T1131] bridge_slave_0: left promiscuous mode [ 758.042622][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.770787][ T5839] Bluetooth: hci0: command tx timeout [ 759.865960][ T5839] Bluetooth: hci5: command tx timeout [ 759.977651][ T5839] Bluetooth: hci4: unknown advertising packet type: 0xae [ 760.825104][ T5839] Bluetooth: hci0: command tx timeout [ 761.343528][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.361731][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.382823][ T1131] bond0 (unregistering): Released all slaves [ 761.740838][T13711] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 761.750992][T13711] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 761.786172][T13711] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 761.945286][T13641] Bluetooth: hci5: command tx timeout [ 762.354036][T13644] chnl_net:caif_netlink_parms(): no params data found [ 763.082989][T13641] Bluetooth: hci0: command tx timeout [ 763.902717][T13659] chnl_net:caif_netlink_parms(): no params data found [ 764.025215][T13641] Bluetooth: hci5: command 0x0419 tx timeout [ 765.452600][ T1131] hsr_slave_0: left promiscuous mode [ 765.470012][ T1131] hsr_slave_1: left promiscuous mode [ 766.125210][T13641] Bluetooth: hci5: command 0x0419 tx timeout [ 766.270439][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.278114][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.297567][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.310834][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.372326][ T1131] veth1_macvtap: left promiscuous mode [ 766.388032][ T1131] veth0_macvtap: left promiscuous mode [ 766.403548][ T1131] veth1_vlan: left promiscuous mode [ 766.409256][ T1131] veth0_vlan: left promiscuous mode [ 767.482573][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 767.562193][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 768.398128][T13644] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.405704][T13644] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.412907][T13644] bridge_slave_0: entered allmulticast mode [ 768.426691][T13644] bridge_slave_0: entered promiscuous mode [ 768.448316][T13644] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.457668][T13644] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.464881][T13644] bridge_slave_1: entered allmulticast mode [ 768.492280][T13644] bridge_slave_1: entered promiscuous mode [ 768.952550][T13659] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.991652][T13659] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.047207][T13659] bridge_slave_0: entered allmulticast mode [ 769.093171][T13659] bridge_slave_0: entered promiscuous mode [ 769.131035][T13644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.256614][T13644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.288933][T13659] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.328427][T13659] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.345994][T13659] bridge_slave_1: entered allmulticast mode [ 769.369022][T13659] bridge_slave_1: entered promiscuous mode [ 769.529263][T13659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.578467][T13659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.764865][T13644] team0: Port device team_slave_0 added [ 771.024699][T13659] team0: Port device team_slave_0 added [ 771.131366][T13659] team0: Port device team_slave_1 added [ 771.180894][ T1131] IPVS: stop unused estimator thread 0... [ 771.413727][T13644] team0: Port device team_slave_1 added [ 771.670044][T13644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.725951][T13644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.759289][T13644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.837185][T13659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.844271][T13659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.937130][T13659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.987018][T13644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.994054][T13644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.059992][T13644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.237123][T13659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.244518][T13659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.327083][T13659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.451138][ T1131] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.510821][T13835] cgroup: Unknown subsys name 'cpuset' [ 773.179400][ T1131] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.277063][T13659] hsr_slave_0: entered promiscuous mode [ 773.309185][T13659] hsr_slave_1: entered promiscuous mode [ 773.325808][T13659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 773.340559][T13659] Cannot create hsr debugfs directory [ 773.464946][ T1131] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.644200][T13644] hsr_slave_0: entered promiscuous mode [ 775.024043][T13644] hsr_slave_1: entered promiscuous mode [ 775.085978][T13644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.172927][T13644] Cannot create hsr debugfs directory [ 776.590374][ T1131] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.154766][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1720'. [ 778.329762][ T1131] bridge_slave_1: left allmulticast mode [ 778.344439][ T1131] bridge_slave_1: left promiscuous mode [ 778.357980][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.835442][ T1131] bridge_slave_0: left allmulticast mode [ 779.842145][ T1131] bridge_slave_0: left promiscuous mode [ 779.851116][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.242925][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'. [ 783.826314][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.843384][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.860620][ T1131] bond0 (unregistering): Released all slaves [ 784.785959][ T1131] hsr_slave_0: left promiscuous mode [ 784.792816][ T1131] hsr_slave_1: left promiscuous mode [ 784.850708][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.875145][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.901350][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.942510][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.007977][ T1131] veth1_macvtap: left promiscuous mode [ 785.013592][ T1131] veth0_macvtap: left promiscuous mode [ 785.044431][ T1131] veth1_vlan: left promiscuous mode [ 785.054311][ T1131] veth0_vlan: left promiscuous mode [ 785.195462][ T5883] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 785.360146][ T5883] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=51.d4 [ 785.375356][ T5883] usb 1-1: New USB device strings: Mfr=231, Product=37, SerialNumber=191 [ 785.386185][ T5883] usb 1-1: Product: syz [ 785.414286][ T5883] usb 1-1: Manufacturer: syz [ 785.425370][ T5883] usb 1-1: SerialNumber: syz [ 785.633999][ T5883] usb 1-1: config 0 descriptor?? [ 786.363898][ T5883] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 786.504847][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 786.564548][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 786.572563][ T5883] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 786.602057][ T5883] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 786.788007][ T5883] usb 1-1: USB disconnect, device number 22 [ 787.394537][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1739'. [ 787.580954][T13644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 787.753225][T13644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 787.875477][T13644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 787.904027][T13644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 787.950069][T14018] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1741'. [ 788.141523][T13659] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 788.221579][T13659] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 788.239325][T13659] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 788.946499][T13659] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 789.848709][T13644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.891189][T13659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.960158][T13644] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.004573][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.011773][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.058699][T13659] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.100652][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.107838][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.186798][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.194004][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.220653][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.227919][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.943595][ C0] net_ratelimit: 203 callbacks suppressed [ 790.943616][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 790.963431][T13659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.050621][T13644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.155394][ T5832] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 791.199303][T13644] veth0_vlan: entered promiscuous mode [ 791.238822][T13644] veth1_vlan: entered promiscuous mode [ 791.329348][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.372285][T13644] veth0_macvtap: entered promiscuous mode [ 791.378314][ T5832] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 791.408923][T13644] veth1_macvtap: entered promiscuous mode [ 791.414940][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.457505][ T5832] usb 2-1: config 0 descriptor?? [ 791.480848][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.494294][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.531660][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.615143][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.727631][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.765150][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.789852][T13644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.854867][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.867212][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.877970][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.889595][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.900693][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.917209][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.930395][ T5832] usbhid 2-1:0.0: can't add hid device: -71 [ 791.937273][ T5832] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 791.939045][T13644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.985224][ T5832] usb 2-1: USB disconnect, device number 23 [ 791.992792][T13644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.003807][T13644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.013045][T13644] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.021865][T13644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.047461][T13659] veth0_vlan: entered promiscuous mode [ 792.105910][T13659] veth1_vlan: entered promiscuous mode [ 792.167353][T13659] veth0_macvtap: entered promiscuous mode [ 792.221018][T13659] veth1_macvtap: entered promiscuous mode [ 792.225407][ T6582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.240851][ T6582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.292163][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.304080][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.314596][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.325320][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.336080][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.348049][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.358617][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.369586][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.381733][T13659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.412905][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.424778][ T6582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.435202][ T6582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.455585][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.472796][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.493828][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.525491][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.560336][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.591752][T13659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.610299][T13659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.654688][T13659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.820019][T13659] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.940870][T13659] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.039003][T13659] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.138604][T13659] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.069407][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.119462][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.404181][ T29] audit: type=1326 audit(1731884800.663:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14128 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd457e719 code=0x7ffc0000 [ 794.477530][T14137] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 794.484107][T14137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 794.491930][T14137] vhci_hcd vhci_hcd.0: Device attached [ 794.530563][ T7665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.551921][ T29] audit: type=1326 audit(1731884800.663:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14128 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd457e719 code=0x7ffc0000 [ 794.578715][ T7665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.663811][ T29] audit: type=1326 audit(1731884800.663:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14128 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8fd458066a code=0x7ffc0000 [ 794.685594][ T29] audit: type=1326 audit(1731884800.663:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14128 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8fd457d0b0 code=0x7ffc0000 [ 794.730100][T14143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1756'. [ 794.744094][ T29] audit: type=1326 audit(1731884800.663:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14128 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8fd457d1ff code=0x7ffc0000 [ 794.775749][T11572] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 794.828506][T14138] vhci_hcd: connection reset by peer [ 794.836020][T14128] delete_channel: no stack [ 794.841708][ T3526] vhci_hcd: stop threads [ 794.855542][ T29] audit: type=1326 audit(1731884800.763:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14128 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8fd457d3aa code=0x7ffc0000 [ 794.857650][ T3526] vhci_hcd: release socket [ 794.953108][ T29] audit: type=1326 audit(1731884800.763:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14128 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd457e719 code=0x7ffc0000 [ 795.005555][ T3526] vhci_hcd: disconnect device [ 795.060833][ T29] audit: type=1326 audit(1731884800.763:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14128 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd457e719 code=0x7ffc0000 [ 795.759207][T14146] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 800.146815][T11572] vhci_hcd: vhci_device speed not set [ 800.182852][ T29] audit: type=1326 audit(1731884806.433:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.4.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 800.340757][ T29] audit: type=1326 audit(1731884806.433:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.4.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 800.362588][ T29] audit: type=1326 audit(1731884806.433:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.4.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe63db8066a code=0x7ffc0000 [ 800.385971][ T29] audit: type=1326 audit(1731884806.433:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.4.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe63db7d0b0 code=0x7ffc0000 [ 800.412867][T14218] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 800.415200][ T29] audit: type=1326 audit(1731884806.433:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.4.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe63db7d1ff code=0x7ffc0000 [ 800.419425][T14218] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 800.448572][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.501216][T14206] delete_channel: no stack [ 800.545150][T14218] vhci_hcd vhci_hcd.0: Device attached [ 800.546822][T14219] vhci_hcd: connection closed [ 800.550994][ T29] audit: type=1326 audit(1731884806.813:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.4.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe63db7d3aa code=0x7ffc0000 [ 800.617961][ T29] audit: type=1326 audit(1731884806.813:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.4.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 800.647023][ T29] audit: type=1326 audit(1731884806.813:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14206 comm="syz.4.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63db7e719 code=0x7ffc0000 [ 800.693364][ T11] vhci_hcd: stop threads [ 800.699519][ T11] vhci_hcd: release socket [ 800.703986][ T11] vhci_hcd: disconnect device [ 800.785337][T13641] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 800.928688][ T29] audit: type=1326 audit(1731884807.193:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14225 comm="syz.9.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be957e719 code=0x7ffc0000 [ 800.965182][ T5941] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 801.021668][T14236] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 801.028258][T14236] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 801.036182][T14236] vhci_hcd vhci_hcd.0: Device attached [ 801.156359][ T5941] usb 1-1: too many configurations: 239, using maximum allowed: 8 [ 801.179285][T14225] delete_channel: no stack [ 801.184113][T14237] vhci_hcd: connection closed [ 801.187684][ T11] vhci_hcd: stop threads [ 801.210097][ T29] audit: type=1326 audit(1731884807.193:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14225 comm="syz.9.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be957e719 code=0x7ffc0000 [ 801.285495][ T5883] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 801.295183][ T11] vhci_hcd: release socket [ 801.299755][ T11] vhci_hcd: disconnect device [ 801.300472][ T5941] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 801.325186][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.333441][ T5883] usb 51-1: enqueue for inactive port 0 [ 801.353939][ T5941] usb 1-1: Product: syz [ 801.370523][ T5941] usb 1-1: Manufacturer: syz [ 801.381003][ T5941] usb 1-1: SerialNumber: syz [ 801.415210][ T5883] vhci_hcd: vhci_device speed not set [ 801.422739][ T5941] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 801.454589][T11572] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 802.587105][ T25] usb 1-1: USB disconnect, device number 23 [ 802.628575][T11572] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 802.636382][T11572] ath9k_htc: Failed to initialize the device [ 802.649398][ T25] usb 1-1: ath9k_htc: USB layer deinitialized [ 805.735416][T14288] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1780'. [ 806.308468][T13641] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 806.843658][T14310] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 807.022898][T14312] tmpfs: Bad value for 'mpol' [ 807.113242][T14312] input: syz1 as /devices/virtual/input/input45 [ 809.115608][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.121961][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.487480][T14282] delete_channel: no stack [ 809.898921][T14337] hfsplus: unable to find HFS+ superblock [ 811.392916][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 811.392937][ T29] audit: type=1326 audit(1731884817.653:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14343 comm="syz.0.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 811.539115][ T29] audit: type=1326 audit(1731884817.653:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14343 comm="syz.0.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 811.555977][T14352] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 811.567320][T14352] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 811.569780][T14343] delete_channel: no stack [ 811.707404][T14352] vhci_hcd vhci_hcd.0: Device attached [ 811.730206][T14358] vhci_hcd: connection closed [ 811.766183][ T11] vhci_hcd: stop threads [ 811.966514][T14367] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1792' sets config #76 [ 812.045683][T13641] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 812.195395][ T11] vhci_hcd: release socket [ 812.207412][ T29] audit: type=1326 audit(1731884817.653:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14343 comm="syz.0.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3882b8066a code=0x7ffc0000 [ 812.229960][ T11] vhci_hcd: disconnect device [ 812.304753][ T29] audit: type=1326 audit(1731884817.653:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14343 comm="syz.0.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3882b7d0b0 code=0x7ffc0000 [ 812.487108][ T29] audit: type=1326 audit(1731884817.653:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14343 comm="syz.0.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3882b7d1ff code=0x7ffc0000 [ 812.702630][ T5911] vhci_hcd: vhci_device speed not set [ 812.735206][ T29] audit: type=1326 audit(1731884818.013:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14343 comm="syz.0.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3882b7d3aa code=0x7ffc0000 [ 812.783304][ T29] audit: type=1326 audit(1731884818.013:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14343 comm="syz.0.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 812.799198][T14373] xt_hashlimit: max too large, truncated to 1048576 [ 812.879930][ T29] audit: type=1326 audit(1731884818.013:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14343 comm="syz.0.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 813.019230][T14379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1794'. [ 816.876868][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1800'. [ 818.690104][T13641] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 819.988284][T14435] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1805' sets config #76 [ 821.475321][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'. [ 822.937146][T14467] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1815'. [ 825.584048][ T5911] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 825.746843][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.775042][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.607795][ T5911] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 826.625080][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.658766][ T5911] usb 5-1: config 0 descriptor?? [ 826.965218][T14508] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1823' sets config #76 [ 827.456033][ T5911] samsung 0003:0419:0600.0013: unknown main item tag 0x2 [ 827.515645][ T5911] samsung 0003:0419:0600.0013: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 827.642007][ T5911] usb 5-1: USB disconnect, device number 20 [ 828.123128][T14517] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 828.181880][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1826'. [ 828.892347][T14515] tmpfs: Bad value for 'mpol' [ 828.899534][T14515] input: syz1 as /devices/virtual/input/input46 [ 832.831268][T14575] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 834.851353][T14585] xt_hashlimit: max too large, truncated to 1048576 [ 835.590543][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1844'. [ 838.945160][ T5911] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 839.105118][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 839.139966][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 839.185811][ T5911] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 839.223830][ T5911] usb 2-1: Product: syz [ 839.240312][ T5911] usb 2-1: Manufacturer: syz [ 839.260378][ T5911] usb 2-1: SerialNumber: syz [ 839.281204][ T5911] usb 2-1: config 0 descriptor?? [ 839.320843][ T5911] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 839.335376][ T5883] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 839.505300][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 839.517025][ T5883] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 839.536923][ T5883] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 839.581579][ T5883] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 839.619732][ T5883] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 839.658198][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 839.681479][ T5883] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 839.691344][ T5883] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 839.736669][ T5883] usb 5-1: Product: syz [ 839.742543][ T5911] gspca_zc3xx: reg_r err -71 [ 839.748920][ T5911] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 839.753404][ T5883] usb 5-1: Manufacturer: syz [ 839.773581][ T5911] usb 2-1: USB disconnect, device number 24 [ 839.794517][ T5883] usb 5-1: SerialNumber: syz [ 839.873265][ T5883] usb 5-1: config 0 descriptor?? [ 839.882955][ T5883] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 839.972623][ T5883] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 840.661151][T14675] input: syz0 as /devices/virtual/input/input47 [ 841.829851][ T5911] usb 5-1: USB disconnect, device number 21 [ 841.835943][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 841.849901][ T5911] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 842.197355][T14685] input: syz0 as /devices/virtual/input/input48 [ 842.747165][T14687] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1859'. [ 843.458384][T14687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.767362][T14687] team0: Port device bond0 added [ 843.995526][T14698] netlink: 'syz.4.1861': attribute type 27 has an invalid length. [ 844.635528][ T5883] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 845.391189][ T5883] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=51.d4 [ 845.401266][ T5883] usb 2-1: New USB device strings: Mfr=231, Product=37, SerialNumber=191 [ 845.418081][ T5883] usb 2-1: Product: syz [ 845.422313][ T5883] usb 2-1: Manufacturer: syz [ 845.431927][ T5883] usb 2-1: SerialNumber: syz [ 845.451377][ T5883] usb 2-1: config 0 descriptor?? [ 846.705101][ T5883] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 847.603845][ T5883] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 848.565623][T11572] usb 2-1: USB disconnect, device number 25 [ 848.819559][T14750] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 849.213559][T14758] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1872'. [ 849.222863][T14758] netlink: 'syz.1.1872': attribute type 1 has an invalid length. [ 849.232042][T14758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1872'. [ 849.578792][T14760] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1870'. [ 849.955192][ T5941] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 850.139280][ T5941] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 850.204079][ T5941] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 850.876584][T14772] netlink: 'syz.1.1876': attribute type 27 has an invalid length. [ 851.171822][ T5941] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 851.181675][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.193979][T14761] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 851.204555][ T5941] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 852.181859][ T5941] usb 1-1: USB disconnect, device number 24 [ 852.207396][T11572] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 852.625708][T11572] usb 3-1: Using ep0 maxpacket: 16 [ 852.633162][T13784] udevd[13784]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.659837][T11572] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 852.669160][T11572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.680525][T11572] usb 3-1: Product: syz [ 852.686594][T11572] usb 3-1: Manufacturer: syz [ 852.691242][T11572] usb 3-1: SerialNumber: syz [ 852.896645][T11572] r8152-cfgselector 3-1: Unknown version 0x0000 [ 852.933266][T11572] r8152-cfgselector 3-1: config 0 descriptor?? [ 853.499845][T11572] r8152-cfgselector 3-1: can't set config #0, error -71 [ 853.893425][T11572] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 855.822677][T14827] 9pnet_fd: Insufficient options for proto=fd [ 858.249716][T14856] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1894'. [ 858.591743][T14860] netlink: 'syz.0.1893': attribute type 21 has an invalid length. [ 858.599766][T14860] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1893'. [ 860.709919][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1896'. [ 862.636123][T14898] binder: 14883:14898 ioctl c0306201 0 returned -14 [ 863.990863][T14910] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1906'. [ 864.287168][T14889] xt_addrtype: ipv6 does not support BROADCAST matching [ 864.408714][T14916] batadv_slave_1: entered promiscuous mode [ 865.127304][T14907] batadv_slave_1: left promiscuous mode [ 866.350629][T14929] xt_hashlimit: max too large, truncated to 1048576 [ 866.436789][T14930] tmpfs: Bad value for 'mpol' [ 866.498416][T14930] input: syz1 as /devices/virtual/input/input49 [ 866.996587][T14928] loop8: detected capacity change from 0 to 7 [ 867.023599][T14928] Dev loop8: unable to read RDB block 7 [ 867.029277][T14928] loop8: unable to read partition table [ 867.035120][T14928] loop8: partition table beyond EOD, truncated [ 867.041305][T14928] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 867.041305][T14928] ) failed (rc=-5) [ 867.137209][ T5941] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 867.305968][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 867.323792][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.407391][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.472349][ T5941] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 867.525807][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.546482][ T5941] usb 1-1: config 0 descriptor?? [ 868.734220][T14957] syz.2.1918 uses obsolete (PF_INET,SOCK_PACKET) [ 870.375885][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.382330][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.925318][ T5941] usbhid 1-1:0.0: can't add hid device: -71 [ 871.937626][ T5941] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 872.142092][ T5941] usb 1-1: USB disconnect, device number 25 [ 873.881375][T14998] tmpfs: Bad value for 'mpol' [ 873.898059][T14998] input: syz1 as /devices/virtual/input/input50 [ 878.415808][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 880.324544][ T29] audit: type=1326 audit(1731884886.573:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa057e719 code=0x7ffc0000 [ 880.346202][ C0] vkms_vblank_simulate: vblank timer overrun [ 880.503555][T15078] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 880.510237][T15078] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 880.518381][T15078] vhci_hcd vhci_hcd.0: Device attached [ 880.775516][ T5941] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 880.818003][ T29] audit: type=1326 audit(1731884886.573:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa057e719 code=0x7ffc0000 [ 880.913036][T15072] delete_channel: no stack [ 880.918537][T15079] vhci_hcd: connection closed [ 880.932114][ T7665] vhci_hcd: stop threads [ 881.063876][ T7665] vhci_hcd: release socket [ 881.068931][ T29] audit: type=1326 audit(1731884886.583:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2fa058066a code=0x7ffc0000 [ 881.091255][ T7665] vhci_hcd: disconnect device [ 881.098219][ T29] audit: type=1326 audit(1731884886.583:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fa057d0b0 code=0x7ffc0000 [ 881.120067][ T29] audit: type=1326 audit(1731884886.583:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2fa057d1ff code=0x7ffc0000 [ 881.141573][ T29] audit: type=1326 audit(1731884886.783:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2fa057d3aa code=0x7ffc0000 [ 881.163123][ T29] audit: type=1326 audit(1731884886.793:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa057e719 code=0x7ffc0000 [ 881.185395][ T29] audit: type=1326 audit(1731884886.793:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15072 comm="syz.1.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa057e719 code=0x7ffc0000 [ 881.761067][T11572] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 881.915689][T11572] usb 5-1: Using ep0 maxpacket: 8 [ 881.926775][T11572] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 881.943295][T11572] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 881.961526][T11572] usb 5-1: Product: syz [ 881.994725][T11572] usb 5-1: Manufacturer: syz [ 882.016613][T11572] usb 5-1: SerialNumber: syz [ 882.053185][T11572] usb 5-1: config 0 descriptor?? [ 882.072060][T11572] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 882.280186][T11572] gspca_zc3xx: reg_w_i err -71 [ 882.291015][T11572] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 882.319017][T11572] usb 5-1: USB disconnect, device number 22 [ 885.062831][ T29] audit: type=1326 audit(1731884891.313:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15136 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 885.085905][ T29] audit: type=1326 audit(1731884891.323:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15136 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 885.250604][T15136] delete_channel: no stack [ 885.332397][T15140] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 885.338985][T15140] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 885.346953][T15140] vhci_hcd vhci_hcd.0: Device attached [ 885.357816][T15141] vhci_hcd: connection closed [ 885.385092][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 885.385111][ T29] audit: type=1326 audit(1731884891.623:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15136 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3882b7d3aa code=0x7ffc0000 [ 885.418173][ T1131] vhci_hcd: stop threads [ 885.422440][ T1131] vhci_hcd: release socket [ 885.445053][ T1131] vhci_hcd: disconnect device [ 885.521943][ T29] audit: type=1326 audit(1731884891.623:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15136 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 885.584659][ T29] audit: type=1326 audit(1731884891.623:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15136 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 886.377467][ T5941] vhci_hcd: vhci_device speed not set [ 887.521680][T13641] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 891.365467][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 891.388627][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 891.397057][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 891.408792][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 891.417904][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 891.428678][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 891.437220][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 891.447166][ T5847] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 891.456730][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 891.464079][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 891.472993][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 891.481783][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 892.153121][T15226] trusted_key: encrypted_key: insufficient parameters specified [ 892.351937][T15201] chnl_net:caif_netlink_parms(): no params data found [ 892.442274][T15202] chnl_net:caif_netlink_parms(): no params data found [ 893.134206][T15201] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.216862][ T29] audit: type=1326 audit(1731884899.473:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15246 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 893.246867][T15250] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 893.253450][T15250] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 893.262181][T15250] vhci_hcd vhci_hcd.0: Device attached [ 893.627060][ T5833] Bluetooth: hci6: command tx timeout [ 893.647500][ T5833] Bluetooth: hci2: command tx timeout [ 893.813379][T15246] delete_channel: no stack [ 893.819278][T15251] vhci_hcd: connection closed [ 893.913620][ T3437] vhci_hcd: stop threads [ 893.935391][T15201] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.960086][ T3437] vhci_hcd: release socket [ 893.967025][T15201] bridge_slave_0: entered allmulticast mode [ 893.991889][ T3437] vhci_hcd: disconnect device [ 894.003580][ T29] audit: type=1326 audit(1731884899.473:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15246 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 894.035619][T15201] bridge_slave_0: entered promiscuous mode [ 894.112535][T15201] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.153590][ T29] audit: type=1326 audit(1731884899.473:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15246 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3882b8066a code=0x7ffc0000 [ 894.189497][T15201] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.227642][T15201] bridge_slave_1: entered allmulticast mode [ 894.262366][T15201] bridge_slave_1: entered promiscuous mode [ 894.458574][ T29] audit: type=1326 audit(1731884899.473:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15246 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3882b7d0b0 code=0x7ffc0000 [ 894.827865][ T29] audit: type=1326 audit(1731884899.473:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15246 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3882b7d1ff code=0x7ffc0000 [ 894.929872][T15262] No control pipe specified [ 895.555092][ T29] audit: type=1326 audit(1731884899.533:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15246 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3882b7d3aa code=0x7ffc0000 [ 896.266572][T13641] Bluetooth: hci2: command tx timeout [ 896.274560][T13641] Bluetooth: hci6: command tx timeout [ 896.441228][T15261] netlink: 'syz.1.1967': attribute type 21 has an invalid length. [ 896.449272][T15261] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1967'. [ 896.493793][T15202] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.511595][T15202] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.521179][ T29] audit: type=1326 audit(1731884899.533:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15246 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 896.755685][T15202] bridge_slave_0: entered allmulticast mode [ 896.784870][T15202] bridge_slave_0: entered promiscuous mode [ 896.816145][T15201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.914069][ T29] audit: type=1326 audit(1731884899.533:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15246 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 897.011281][T15201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.054639][ T29] audit: type=1326 audit(1731884899.543:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15246 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 897.121529][ T29] audit: type=1326 audit(1731884899.543:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15246 comm="syz.0.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3882b7e719 code=0x7ffc0000 [ 897.157807][T15202] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.188091][T15202] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.224705][T15202] bridge_slave_1: entered allmulticast mode [ 897.269420][T15202] bridge_slave_1: entered promiscuous mode [ 897.608841][T15202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.751215][T15201] team0: Port device team_slave_0 added [ 897.806391][T15201] team0: Port device team_slave_1 added [ 897.838799][T15202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.347018][T13641] Bluetooth: hci2: command tx timeout [ 898.352564][ T5833] Bluetooth: hci6: command tx timeout [ 899.182429][T15202] team0: Port device team_slave_0 added [ 899.500758][T14095] ================================================================== [ 899.508875][T14095] BUG: KASAN: slab-use-after-free in device_for_each_child+0xbb/0x1b0 [ 899.517076][T14095] Read of size 8 at addr ffff88807fff9308 by task kbnepd /14095 [ 899.524829][T14095] [ 899.527187][T14095] CPU: 0 UID: 0 PID: 14095 Comm: kbnepd  Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 899.537807][T14095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 899.547903][T14095] Call Trace: [ 899.551209][T14095] [ 899.554161][T14095] dump_stack_lvl+0x241/0x360 [ 899.558872][T14095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 899.564121][T14095] ? __pfx__printk+0x10/0x10 [ 899.568751][T14095] ? _printk+0xd5/0x120 [ 899.572948][T14095] ? __virt_addr_valid+0x183/0x530 [ 899.578094][T14095] ? __virt_addr_valid+0x183/0x530 [ 899.583250][T14095] print_report+0x169/0x550 [ 899.587799][T14095] ? __virt_addr_valid+0x183/0x530 [ 899.592947][T14095] ? __virt_addr_valid+0x183/0x530 [ 899.598114][T14095] ? __virt_addr_valid+0x45f/0x530 [ 899.603254][T14095] ? __phys_addr+0xba/0x170 [ 899.607780][T14095] ? device_for_each_child+0xbb/0x1b0 [ 899.613179][T14095] kasan_report+0x143/0x180 [ 899.617719][T14095] ? device_for_each_child+0xbb/0x1b0 [ 899.623125][T14095] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 899.628628][T14095] device_for_each_child+0xbb/0x1b0 [ 899.633867][T14095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 899.640239][T14095] ? __pfx_device_for_each_child+0x10/0x10 [ 899.646094][T14095] ? _raw_spin_unlock_irq+0x23/0x50 [ 899.651333][T14095] ? lockdep_hardirqs_on+0x99/0x150 [ 899.656583][T14095] pm_runtime_set_memalloc_noio+0x114/0x260 [ 899.662664][T14095] netdev_unregister_kobject+0x178/0x250 [ 899.668352][T14095] unregister_netdevice_many_notify+0x1851/0x1da0 [ 899.674825][T14095] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 899.681628][T14095] ? do_raw_spin_unlock+0x13c/0x8b0 [ 899.686840][T14095] ? __mutex_lock+0x52a/0xd70 [ 899.691522][T14095] unregister_netdevice_queue+0x303/0x370 [ 899.697258][T14095] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 899.703525][T14095] ? down_write+0x18c/0x220 [ 899.708045][T14095] ? __pfx_down_write+0x10/0x10 [ 899.712930][T14095] unregister_netdev+0x1c/0x30 [ 899.717697][T14095] bnep_session+0x2e0e/0x3000 [ 899.722379][T14095] ? __pfx_bnep_session+0x10/0x10 [ 899.727404][T14095] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 899.733292][T14095] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 899.739613][T14095] ? __pfx_woken_wake_function+0x10/0x10 [ 899.745264][T14095] ? __kthread_parkme+0x169/0x1d0 [ 899.750363][T14095] ? __pfx_bnep_session+0x10/0x10 [ 899.755411][T14095] kthread+0x2f0/0x390 [ 899.759477][T14095] ? __pfx_bnep_session+0x10/0x10 [ 899.764507][T14095] ? __pfx_kthread+0x10/0x10 [ 899.769098][T14095] ret_from_fork+0x4b/0x80 [ 899.773516][T14095] ? __pfx_kthread+0x10/0x10 [ 899.778098][T14095] ret_from_fork_asm+0x1a/0x30 [ 899.782864][T14095] [ 899.785888][T14095] [ 899.788200][T14095] Allocated by task 13659: [ 899.792596][T14095] kasan_save_track+0x3f/0x80 [ 899.797271][T14095] __kasan_kmalloc+0x98/0xb0 [ 899.801858][T14095] __kmalloc_noprof+0x1fc/0x400 [ 899.806699][T14095] hci_alloc_dev_priv+0x27/0x2030 [ 899.811714][T14095] vhci_create_device+0x116/0x6a0 [ 899.816732][T14095] vhci_write+0x3cf/0x490 [ 899.821059][T14095] vfs_write+0xaeb/0xd30 [ 899.825337][T14095] ksys_write+0x183/0x2b0 [ 899.829676][T14095] do_syscall_64+0xf3/0x230 [ 899.834174][T14095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.840059][T14095] [ 899.842369][T14095] Freed by task 14988: [ 899.846440][T14095] kasan_save_track+0x3f/0x80 [ 899.851130][T14095] kasan_save_free_info+0x40/0x50 [ 899.856166][T14095] __kasan_slab_free+0x59/0x70 [ 899.860948][T14095] kfree+0x1a0/0x440 [ 899.864844][T14095] hci_release_dev+0x1525/0x16b0 [ 899.869793][T14095] bt_host_release+0x83/0x90 [ 899.874493][T14095] device_release+0x99/0x1c0 [ 899.879102][T14095] kobject_put+0x22f/0x480 [ 899.883563][T14095] vhci_release+0x88/0xd0 [ 899.887945][T14095] __fput+0x23f/0x880 [ 899.891926][T14095] task_work_run+0x24f/0x310 [ 899.896525][T14095] do_exit+0xa2f/0x28e0 [ 899.900694][T14095] do_group_exit+0x207/0x2c0 [ 899.905316][T14095] get_signal+0x16a3/0x1740 [ 899.909820][T14095] arch_do_signal_or_restart+0x96/0x860 [ 899.915369][T14095] syscall_exit_to_user_mode+0xc9/0x370 [ 899.921011][T14095] do_syscall_64+0x100/0x230 [ 899.925605][T14095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.931512][T14095] [ 899.933830][T14095] Last potentially related work creation: [ 899.939534][T14095] kasan_save_stack+0x3f/0x60 [ 899.944214][T14095] __kasan_record_aux_stack+0xac/0xc0 [ 899.949609][T14095] insert_work+0x3e/0x330 [ 899.953937][T14095] __queue_work+0xb66/0xf50 [ 899.958448][T14095] queue_work_on+0x1c2/0x380 [ 899.963049][T14095] l2cap_recv_frame+0xd265/0x10db0 [ 899.968169][T14095] hci_rx_work+0x50f/0xca0 [ 899.972573][T14095] process_scheduled_works+0xa63/0x1850 [ 899.978122][T14095] worker_thread+0x870/0xd30 [ 899.982711][T14095] kthread+0x2f0/0x390 [ 899.986777][T14095] ret_from_fork+0x4b/0x80 [ 899.991208][T14095] ret_from_fork_asm+0x1a/0x30 [ 899.995974][T14095] [ 899.998308][T14095] Second to last potentially related work creation: [ 900.004877][T14095] kasan_save_stack+0x3f/0x60 [ 900.009551][T14095] __kasan_record_aux_stack+0xac/0xc0 [ 900.014916][T14095] insert_work+0x3e/0x330 [ 900.019248][T14095] __queue_work+0xc8b/0xf50 [ 900.023748][T14095] queue_work_on+0x1c2/0x380 [ 900.028335][T14095] hci_recv_frame+0x598/0x6f0 [ 900.033003][T14095] vhci_write+0x35a/0x490 [ 900.037325][T14095] vfs_write+0xaeb/0xd30 [ 900.041567][T14095] ksys_write+0x183/0x2b0 [ 900.045897][T14095] do_syscall_64+0xf3/0x230 [ 900.050404][T14095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.056294][T14095] [ 900.058607][T14095] The buggy address belongs to the object at ffff88807fff8000 [ 900.058607][T14095] which belongs to the cache kmalloc-8k of size 8192 [ 900.072654][T14095] The buggy address is located 4872 bytes inside of [ 900.072654][T14095] freed 8192-byte region [ffff88807fff8000, ffff88807fffa000) [ 900.086619][T14095] [ 900.088940][T14095] The buggy address belongs to the physical page: [ 900.095354][T14095] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fff8 [ 900.104114][T14095] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 900.112621][T14095] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 900.120609][T14095] page_type: f5(slab) [ 900.124599][T14095] raw: 00fff00000000040 ffff88801ac42280 0000000000000000 dead000000000001 [ 900.133353][T14095] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 900.141934][T14095] head: 00fff00000000040 ffff88801ac42280 0000000000000000 dead000000000001 [ 900.150600][T14095] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 900.159264][T14095] head: 00fff00000000003 ffffea0001fffe01 ffffffffffffffff 0000000000000000 [ 900.167945][T14095] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 900.176615][T14095] page dumped because: kasan: bad access detected [ 900.183041][T14095] page_owner tracks the page as allocated [ 900.188750][T14095] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5506, tgid 5506 (dhcpcd-run-hook), ts 45146974806, free_ts 45117432718 [ 900.209590][T14095] post_alloc_hook+0x1f3/0x230 [ 900.214373][T14095] get_page_from_freelist+0x363e/0x3790 [ 900.219917][T14095] __alloc_pages_noprof+0x292/0x710 [ 900.225118][T14095] alloc_pages_mpol_noprof+0x3e8/0x680 [ 900.230569][T14095] alloc_slab_page+0x6a/0x140 [ 900.235245][T14095] allocate_slab+0x5a/0x2f0 [ 900.239772][T14095] ___slab_alloc+0xcd1/0x14b0 [ 900.244541][T14095] __slab_alloc+0x58/0xa0 [ 900.248867][T14095] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 900.254249][T14095] tomoyo_init_log+0x11cd/0x2050 [ 900.259177][T14095] tomoyo_supervisor+0x38a/0x11f0 [ 900.264191][T14095] tomoyo_find_next_domain+0x4a2/0x1d40 [ 900.269742][T14095] tomoyo_bprm_check_security+0x114/0x180 [ 900.275541][T14095] security_bprm_check+0x86/0x250 [ 900.280558][T14095] bprm_execve+0xa56/0x1770 [ 900.285057][T14095] do_execveat_common+0x55f/0x6f0 [ 900.290077][T14095] page last free pid 5505 tgid 5505 stack trace: [ 900.296393][T14095] free_unref_page+0xded/0x1130 [ 900.301242][T14095] __put_partials+0xeb/0x130 [ 900.305838][T14095] put_cpu_partial+0x17c/0x250 [ 900.310602][T14095] __slab_free+0x2ea/0x3d0 [ 900.315021][T14095] qlist_free_all+0x9a/0x140 [ 900.319606][T14095] kasan_quarantine_reduce+0x14f/0x170 [ 900.325066][T14095] __kasan_slab_alloc+0x23/0x80 [ 900.329934][T14095] __kmalloc_noprof+0x1a6/0x400 [ 900.334777][T14095] tomoyo_supervisor+0xe0d/0x11f0 [ 900.339794][T14095] tomoyo_env_perm+0x178/0x210 [ 900.344567][T14095] tomoyo_find_next_domain+0x146e/0x1d40 [ 900.350202][T14095] tomoyo_bprm_check_security+0x114/0x180 [ 900.355921][T14095] security_bprm_check+0x86/0x250 [ 900.360943][T14095] bprm_execve+0xa56/0x1770 [ 900.365448][T14095] do_execveat_common+0x55f/0x6f0 [ 900.370470][T14095] __x64_sys_execve+0x92/0xb0 [ 900.375142][T14095] [ 900.377458][T14095] Memory state around the buggy address: [ 900.383092][T14095] ffff88807fff9200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 900.391165][T14095] ffff88807fff9280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 900.399222][T14095] >ffff88807fff9300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 900.407271][T14095] ^ [ 900.411599][T14095] ffff88807fff9380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 900.419674][T14095] ffff88807fff9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 900.427753][T14095] ================================================================== [ 900.435843][ C0] vkms_vblank_simulate: vblank timer overrun [ 900.466124][T13641] Bluetooth: hci2: command tx timeout [ 900.471651][ T5833] Bluetooth: hci6: command tx timeout [ 900.485121][T14095] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 900.492389][T14095] CPU: 1 UID: 0 PID: 14095 Comm: kbnepd  Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 900.503119][T14095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 900.513181][T14095] Call Trace: [ 900.516461][T14095] [ 900.519412][T14095] dump_stack_lvl+0x241/0x360 [ 900.524098][T14095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 900.529310][T14095] ? __pfx__printk+0x10/0x10 [ 900.533973][T14095] ? preempt_schedule+0xe1/0xf0 [ 900.538829][T14095] ? vscnprintf+0x5d/0x90 [ 900.543188][T14095] panic+0x349/0x880 [ 900.547097][T14095] ? check_panic_on_warn+0x21/0xb0 [ 900.552235][T14095] ? __pfx_panic+0x10/0x10 [ 900.556658][T14095] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 900.562655][T14095] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 900.568981][T14095] ? print_report+0x502/0x550 [ 900.573677][T14095] check_panic_on_warn+0x86/0xb0 [ 900.578635][T14095] ? device_for_each_child+0xbb/0x1b0 [ 900.584012][T14095] end_report+0x77/0x160 [ 900.588263][T14095] kasan_report+0x154/0x180 [ 900.592770][T14095] ? device_for_each_child+0xbb/0x1b0 [ 900.598156][T14095] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 900.603624][T14095] device_for_each_child+0xbb/0x1b0 [ 900.608843][T14095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 900.615179][T14095] ? __pfx_device_for_each_child+0x10/0x10 [ 900.621005][T14095] ? _raw_spin_unlock_irq+0x23/0x50 [ 900.626211][T14095] ? lockdep_hardirqs_on+0x99/0x150 [ 900.631416][T14095] pm_runtime_set_memalloc_noio+0x114/0x260 [ 900.637329][T14095] netdev_unregister_kobject+0x178/0x250 [ 900.642974][T14095] unregister_netdevice_many_notify+0x1851/0x1da0 [ 900.649421][T14095] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 900.656202][T14095] ? do_raw_spin_unlock+0x13c/0x8b0 [ 900.661504][T14095] ? __mutex_lock+0x52a/0xd70 [ 900.666188][T14095] unregister_netdevice_queue+0x303/0x370 [ 900.671923][T14095] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 900.678180][T14095] ? down_write+0x18c/0x220 [ 900.682774][T14095] ? __pfx_down_write+0x10/0x10 [ 900.687672][T14095] unregister_netdev+0x1c/0x30 [ 900.692448][T14095] bnep_session+0x2e0e/0x3000 [ 900.697155][T14095] ? __pfx_bnep_session+0x10/0x10 [ 900.702279][T14095] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 900.708214][T14095] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 900.714544][T14095] ? __pfx_woken_wake_function+0x10/0x10 [ 900.720183][T14095] ? __kthread_parkme+0x169/0x1d0 [ 900.725214][T14095] ? __pfx_bnep_session+0x10/0x10 [ 900.730238][T14095] kthread+0x2f0/0x390 [ 900.734303][T14095] ? __pfx_bnep_session+0x10/0x10 [ 900.739348][T14095] ? __pfx_kthread+0x10/0x10 [ 900.743945][T14095] ret_from_fork+0x4b/0x80 [ 900.748536][T14095] ? __pfx_kthread+0x10/0x10 [ 900.753117][T14095] ret_from_fork_asm+0x1a/0x30 [ 900.757915][T14095] [ 900.761278][T14095] Kernel Offset: disabled [ 900.765621][T14095] Rebooting in 86400 seconds..